Vulnérabilités de Red Hat Self-service automation portal 2

Votre version est-elle touchée ?

CVE	Résumé	Score	Publiée
CVE-2026-44005	vm2 is an open source vm/sandbox for Node.js	10.0 Critique	13 mai 2026
CVE-2026-45411	vm2 is an open source vm/sandbox for Node.js	9.8 Critique	13 mai 2026
CVE-2026-44009	vm2: Sandbox Breakout Through Null Proto Exception	9.8 Critique	13 mai 2026
CVE-2026-44008	vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`	9.8 Critique	13 mai 2026
CVE-2026-44007	vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution	9.1 Critique	13 mai 2026
CVE-2026-44006	vm2 is an open source vm/sandbox for Node.js	10.0 Critique	13 mai 2026
CVE-2026-43999	vm2 is an open source vm/sandbox for Node.js	9.9 Critique	13 mai 2026
CVE-2026-43997	vm2 is an open source vm/sandbox for Node.js	10.0 Critique	13 mai 2026
CVE-2026-26956	vm2 is an open source vm/sandbox for Node.js	9.8 Critique	4 mai 2026
CVE-2026-26332	vm2 is an open source vm/sandbox for Node.js	9.8 Critique	4 mai 2026
CVE-2026-24120	vm2 is an open source vm/sandbox for Node.js	9.8 Critique	4 mai 2026
CVE-2026-24118	vm2 is an open source vm/sandbox for Node.js	9.8 Critique	4 mai 2026
CVE-2026-41242	protobufjs compiles protobuf definitions into JavaScript (JS) functions	9.4 Critique	18 avr. 2026
CVE-2026-25896	fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based…	9.3 Critique	20 févr. 2026
CVE-2026-1615	Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of…	9.8 Critique	9 févr. 2026