1164 matches found
CVE-2026-93603
A flaw was found in vm2. This vulnerability allows an attacker who can execute untrusted script within the sandbox to achieve arbitrary code execution on the underlying host system by escaping sandbox containment. The issue occurs because vm2 fails to properly handle function calls lacking an...
CVE-2026-93606
A flaw was found in vm2. An attacker running untrusted code within the sandbox can bypass isolation controls to achieve arbitrary code execution on the host system. This issue is caused by improper sanitization of host Promise objects, which allows sandboxed scripts to manipulate Promise...
CVE-2026-93605
A flaw was found in vm2. The sandbox environment fails to restrict access to the childprocess module, which handles system command execution. In environments configured to allow built-in modules, an attacker capable of running untrusted code within the sandbox can load this module to break...
CVE-2026-93604
A flaw was found in vm2. Untrusted guest code can exploit this vulnerability when the crypto builtin is explicitly allowlisted for a NodeVM Node.js Virtual Machine. By calling the crypto.setFips function, an attacker can modify the FIPS Federal Information Processing Standards mode of the entire...
ROOT-APP-NPM-AIKIDO-2026-10843 AIKIDO-2026-10843 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10843 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10726 AIKIDO-2026-10726 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10726 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10716 AIKIDO-2026-10716 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10716 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10729 AIKIDO-2026-10729 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10729 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10839 AIKIDO-2026-10839 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10839 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10689 AIKIDO-2026-10689 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10689 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10723 AIKIDO-2026-10723 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10723 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10846 AIKIDO-2026-10846 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10846 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10721 AIKIDO-2026-10721 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10721 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10844 AIKIDO-2026-10844 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10844 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10718 AIKIDO-2026-10718 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10718 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10725 AIKIDO-2026-10725 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10725 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10842 AIKIDO-2026-10842 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10842 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10840 AIKIDO-2026-10840 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10840 in the vm2 package for Root:npm. Multiple fixed versions available...