vm2 vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-93605Criticalvm2: vm2 contains a sandbox escape vulnerabilityCVE-2026-100721Criticalvm2: vm2: NodeVM custom resolution bypasses external path boundariesCVE-2026-100722Highvm2: vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host processCVE-2026-100723Mediumvm2: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundaryCVE-2026-92959Highvm2: vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVMCVE-2026-92955Criticalvm2: vm2: Sandbox Escape (NodeVM)CVE-2026-92954Criticalvm2: vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host processCVE-2026-92953Criticalvm2: vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fixCVE-2026-92934Criticalvm2: vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuitCVE-2026-92933Mediumvm2: vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stackCVE-2026-92936Mediumvm2: vm2 leaks absolute host filesystem paths to sandbox code via error stack formattingCVE-2026-92942Highvm2: vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)CVE-2026-92946Criticalvm2: vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCECVE-2026-92947Criticalvm2: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer poolCVE-2026-92956Criticalvm2: vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypassCVE-2026-92952Mediumvm2: vm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checksCVE-2026-92948Criticalvm2: vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escapeCVE-2026-92950Highvm2: vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scriptsCVE-2026-92940Criticalvm2: vm2 exposes host HTTPS credentials and TLS traffic through globalAgentCVE-2026-92951Criticalvm2: vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host PackageCVE-2026-92958Highvm2: vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writesCVE-2026-92957Criticalvm2: vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_processCVE-2026-92949Mediumvm2: vm2: vm.freeze()/vm.readonly() bypass via accessor descriptorCVE-2026-92935Criticalvm2: vm2: NodeVM nesting guard accepts array-shaped require and permits host RCECVE-2026-92937Criticalvm2: vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo