PT-2026-76815

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.6 Description An issue exists where the bufferAllocLimit enforcement in lib/setup-sandbox.js is bypassed. While this limit is intended to cap host-side Buffer allocations driven by sandbox code to prevent Denial of...

CVE-2026-47683: Allocation of Resources Without Limits or Throttling

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concatlist, totalLength or Buffer.fromarrayLike with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory...

CVE-2026-47698: Improper Control of Dynamically-Managed Code Resources

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call around dangerous host prototype getter and setter mutators, allowing sandbox code to sever a host intrinsic's prototype chain and...

PT-2026-76816

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.6 Description In the handleException function within lib/setup-sandbox.js, the software fails to sanitize the Error.cause property introduced in ES2022. While the function recursively sanitizes SuppressedError.error,...

PT-2026-76817

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.6 Description A sandbox breakout allows code running within the environment to escape and execute arbitrary commands on the host system. The issue occurs because lib/bridge.js and lib/setup-sandbox.js fail to block...

CVE-2026-47686: Protection Mechanism Failure

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateError.errors but does not sanitize Error.cause, allowing sandbox code to obtain a powerful host object such as process...

PT-2026-82821

Summary: The bufferAllocLimit defense GHSA-6785-pvv7-mvg7 can be completely bypassed using ArrayBuffer, SharedArrayBuffer, or any TypedArray constructor. These allocate identical host-process RSS through the same V8/libuv C++ allocation path as Buffer.alloc but are not subject to the size cap...

vm2 v3.11.6

vm2 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Important Security Disclaimer Before using vm2, you should understand how it works and its limitations. vm2 attempts to sandbox untrusted JavaScript code within the same Node.js process as your application...

PT-2026-94331

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.6 Description When the builtin: '' configuration is used, the software fails to restrict access to the os and dns built-in modules. This allows code running within the sandbox to access process-wide observability dat...

PT-2026-94332

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.6 Description Failure to enforce the bufferAllocLimit on ArrayBuffer, SharedArrayBuffer, and TypedArray constructors allows attackers to allocate arbitrary host memory. While the bufferAllocLimit defense caps...

GHSA-6J9G-8FXC-25HQ Duplicate Advisory: Flowise contains an unauthenticated sandbox escape

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9gvv-qjj3-2p6g. This link is maintained to preserve external references. Original Description Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the...

Duplicate Advisory: Flowise contains an unauthenticated sandbox escape

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9gvv-qjj3-2p6g. This link is maintained to preserve external references. Original Description Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the...

CVE-2026-73602

Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...

CVE-2026-73483

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...

CVE-2026-73602 Flowise before 3.1.3 Sandbox Escape to RCE

Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...

CVE-2026-73602

Flowise up to 3.1.3 contains a sandbox escape in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by bypassing moment locale validation. An attacker can craft a fake String object with a match function to bypass path traversal checks and load/execute malicious ...

EUVD-2026-57806

Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...

CVE-2026-73602 Flowise before 3.1.3 Sandbox Escape to RCE

Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...

CVE-2026-73602 Flowise before 3.1.3 Sandbox Escape to RCE

Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to...

CVE-2026-73483 Flowise before 3.1.3 Sandbox Escape via Puppeteer

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...