patriksimek vm2 vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20237
3. 202669

Newest CVEs

• CVE-2026-100723

  vm2 before 3.12.2 Memory Disclosure via zlib Buffer Pool

  patriksimek · vm2

  Medium6.9
• CVE-2026-100722

  vm2 before 3.12.2 Host Process Termination via Construct Trap

  patriksimek · vm2

  High8.9
• CVE-2026-100721

  vm2 before 3.12.2 Authorization Bypass via Custom Resolver

  patriksimek · vm2

  Critical9.5
• CVE-2026-93606

  vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species

  patriksimek · vm2

  Critical10.0
• CVE-2026-93605

  vm2 NodeVM before 3.12.1 Remote Code Execution via child_process

  patriksimek · vm2

  Critical10.0
• CVE-2026-93604

  vm2 3.11.8 Sandbox Escape via crypto.setFips

  patriksimek · vm2

  Medium6.9
• CVE-2026-93603

  vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Function

  patriksimek · vm2

  Critical10.0
• CVE-2026-92963

  vm2 before 3.11.2 Information Disclosure via Internal State

  patriksimek · vm2

  Medium6.9
• CVE-2026-92962

  vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js

  patriksimek · vm2

  Low2.1
• CVE-2026-92961

  vm2 before 3.11.6 Memory Exhaustion DoS via bufferAllocLimit Bypass

  patriksimek · vm2

  High8.7