| CVE-2026-47210 |
vm2 is an open source vm/sandbox for Node.js
|
9.8
Critical
|
Jun 12, 2026 |
| CVE-2026-47208 |
vm2 is an open source vm/sandbox for Node.js
|
10.0
Critical
|
Jun 12, 2026 |
| CVE-2026-47140 |
vm2 is an open source vm/sandbox for Node.js
|
10.0
Critical
|
Jun 12, 2026 |
| CVE-2026-47137 |
vm2 is an open source vm/sandbox for Node.js
|
10.0
Critical
|
Jun 12, 2026 |
| CVE-2026-47131 |
vm2 is an open source vm/sandbox for Node.js
|
10.0
Critical
|
Jun 12, 2026 |
| CVE-2026-44005 |
vm2 is an open source vm/sandbox for Node.js
|
10.0
Critical
|
May 13, 2026 |
| CVE-2026-45411 |
vm2 is an open source vm/sandbox for Node.js
|
9.8
Critical
|
May 13, 2026 |
| CVE-2026-44009 |
vm2: Sandbox Breakout Through Null Proto Exception
|
9.8
Critical
|
May 13, 2026 |
| CVE-2026-44008 |
vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`
|
9.8
Critical
|
May 13, 2026 |
| CVE-2026-44007 |
vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution
|
9.1
Critical
|
May 13, 2026 |
| CVE-2026-44006 |
vm2 is an open source vm/sandbox for Node.js
|
10.0
Critical
|
May 13, 2026 |
| CVE-2026-43999 |
vm2 is an open source vm/sandbox for Node.js
|
9.9
Critical
|
May 13, 2026 |
| CVE-2026-43997 |
vm2 is an open source vm/sandbox for Node.js
|
10.0
Critical
|
May 13, 2026 |
| CVE-2026-26956 |
vm2 is an open source vm/sandbox for Node.js
|
9.8
Critical
|
May 4, 2026 |
| CVE-2026-26332 |
vm2 is an open source vm/sandbox for Node.js
|
9.8
Critical
|
May 4, 2026 |
| CVE-2026-24781 |
vm2 is an open source vm/sandbox for Node.js
|
9.8
Critical
|
May 4, 2026 |
| CVE-2026-24120 |
vm2 is an open source vm/sandbox for Node.js
|
9.8
Critical
|
May 4, 2026 |
| CVE-2026-24118 |
vm2 is an open source vm/sandbox for Node.js
|
9.8
Critical
|
May 4, 2026 |
| CVE-2026-22709 |
vm2 is an open source vm/sandbox for Node.js
|
9.8
Critical
|
Jan 26, 2026 |
| CVE-2023-37903 |
vm2 is an open source vm/sandbox for Node.js
|
9.8
Critical
|
Jul 21, 2023 |
| CVE-2023-37466 |
vm2 is an advanced vm/sandbox for Node.js
|
9.8
Critical
|
Jul 13, 2023 |
| CVE-2023-32314 |
vm2 is a sandbox that can run untrusted code with Node's built-in modules
|
9.8
Critical
|
May 15, 2023 |
| CVE-2023-30547 |
vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules
|
9.8
Critical
|
Apr 17, 2023 |
| CVE-2023-29199 |
There exists a vulnerability in source code transformer (exception sanitization logic) of vm2 for versions up to 3.9.15,…
|
9.8
Critical
|
Apr 14, 2023 |
| CVE-2023-29017 |
vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules
|
10.0
Critical
|
Apr 6, 2023 |