vm2 vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-43998Highvm2: vm2 has a NodeVM require.root bypass via symlink traversal that allows sandbox escape CVE-2026-44003Mediumvm2: vm2's Transformer Fast-Path Bypass Exposes Internal State Variable CVE-2026-44002Mediumvm2: vm2 is Vulnerable to Host File Path Disclosure via Stack Trace Information Leak CVE-2026-44000Mediumvm2: vm2 Host Promise Resolution Preserves Object Identity Across Sandbox Boundary CVE-2026-44004Highvm2: vm2 Sandbox Access to Host Buffer.alloc Allows timeout Bypass Resulting in Memory Exhaustion CVE-2026-44001Highvm2: vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)CVE-2026-43999Criticalvm2: vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape CVE-2026-44005Criticalvm2: vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape CVE-2026-43997Criticalvm2: vm2 Access to Host Object Enables Sandbox Escape CVE-2026-44006Criticalvm2: vm2 has a Sandbox Escape Vulnerability CVE-2026-26956Criticalvm2: VM2 Has a WASM Sandbox Escape CVE-2026-26332Criticalvm2: VM2 Has a Sandbox Escape Issue via SuppressedError CVE-2026-24781Criticalvm2: VM2 Has Sandbox Breakout Through Inspect Function CVE-2026-24120Criticalvm2: VM2 Has Sandbox Breakout Through Promise Species CVE-2026-24118Criticalvm2: VM2 Sandbox Breakout Through __lookupGetter__CVE-2026-22709Criticalvm2: vm2 has a Sandbox Escape CVE-2023-37466Criticalvm2: vm2 Sandbox Escape vulnerability CVE-2023-37903Criticalvm2: vm2 Sandbox Escape vulnerability CVE-2023-32313Mediumvm2: vm2 vulnerable to Inspect Manipulation CVE-2023-32314Criticalvm2: vm2 Sandbox Escape vulnerability CVE-2023-30547Criticalvm2: vm2 Sandbox Escape vulnerability CVE-2023-29199Criticalvm2: vm2 Sandbox Escape vulnerability CVE-2023-29017Criticalvm2: vm2 vulnerable to sandbox escape CVE-2022-25893Criticalvm2: vm2 vulnerable to Arbitrary Code Execution CVE-2022-36067Criticalvm2: vm2 vulnerable to Sandbox Escape resulting in Remote Code Execution on host

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.