patriksimek

RSS JSON

Wednesday, October 7
- GitHub CVE-2026-93605
  vm2 contains a sandbox escape vulnerability
  - patriksimek vm2
  - Critical
  - CVSS 10.0
  - EPSS 0.73%
  - Fixed version listed
  18:05 UTC
Monday, October 5
- GitHub CVE-2026-92955
  vm2: Sandbox Escape (NodeVM)
  - patriksimek vm2
  - Critical
  - CVSS 10.0
  - EPSS 0.71%
  - Fixed version listed
  22:47 UTC
- GitHub CVE-2026-92946
  vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE
  - patriksimek vm2
  - Critical
  - CVSS 10.0
  - EPSS 0.86%
  - Fixed version listed
  22:34 UTC
- GitHub CVE-2026-92947
  vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool
  - patriksimek vm2
  - Critical
  - CVSS 10.0
  - EPSS 0.48%
  - Fixed version listed
  22:34 UTC
- GitHub CVE-2026-92956
  vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass
  - patriksimek vm2
  - Critical
  - CVSS 10.0
  - EPSS 0.59%
  - Fixed version listed
  22:34 UTC
- GitHub CVE-2026-100721
  vm2: NodeVM custom resolution bypasses external path boundaries
  - patriksimek vm2
  - Critical
  - CVSS 9.5
  - EPSS 0.4%
  - Fixed version listed
  23:24 UTC
- GitHub CVE-2026-92934
  vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit
  - patriksimek vm2
  - Critical
  - CVSS 9.5
  - EPSS 0.76%
  - Fixed version listed
  22:38 UTC
- GitHub CVE-2026-92953
  vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix
  - patriksimek vm2
  - Critical
  - CVSS 9.3
  - EPSS 0.5%
  - Fixed version listed
  22:45 UTC
- GitHub CVE-2026-92954
  vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process
  - patriksimek vm2
  - Critical
  - CVSS 9.2
  - EPSS 0.49%
  - Fixed version listed
  22:45 UTC
Thursday, October 1
- GitHub CVE-2026-92940
  vm2 exposes host HTTPS credentials and TLS traffic through globalAgent
  - patriksimek vm2
  - Critical
  - CVSS 10.0
  - EPSS 0.47%
  - Fixed version listed
  15:38 UTC
- GitHub CVE-2026-92937
  vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection
  - patriksimek vm2
  - Critical
  - CVSS 10.0
  - EPSS 1.03%
  - Fixed version listed
  15:32 UTC
- GitHub CVE-2026-92941
  vm2 NodeVM can replace the host process TLS trust store
  - patriksimek vm2
  - Critical
  - CVSS 10.0
  - EPSS 0.29%
  - Fixed version listed
  15:27 UTC
- GitHub CVE-2026-92948
  vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape
  - patriksimek vm2
  - Critical
  - CVSS 9.9
  - EPSS 0.65%
  - Fixed version listed
  15:41 UTC
- GitHub CVE-2026-92951
  vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package
  - patriksimek vm2
  - Critical
  - CVSS 9.9
  - EPSS 0.54%
  - Fixed version listed
  15:37 UTC
- GitHub CVE-2026-92957
  vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process
  - patriksimek vm2
  - Critical
  - CVSS 9.9
  - EPSS 0.54%
  - Fixed version listed
  15:36 UTC
- GitHub CVE-2026-92938
  vm2 allows a sandboxed plugin to execute native code through `node:sqlite`
  - patriksimek vm2
  - Critical
  - CVSS 9.9
  - EPSS 0.62%
  - Fixed version listed
  15:29 UTC
- GitHub CVE-2026-92939
  vm2 crypto builtin loads attacker native code through setEngine
  - patriksimek vm2
  - Critical
  - CVSS 9.9
  - EPSS 0.62%
  - Fixed version listed
  15:28 UTC
- GitHub CVE-2026-92944
  vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector
  - patriksimek vm2
  - Critical
  - CVSS 9.8
  - EPSS 0.84%
  - Fixed version listed
  15:28 UTC
- GitHub CVE-2026-92935
  vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE
  - patriksimek vm2
  - Critical
  - CVSS 9.0
  - EPSS 0.67%
  - Fixed version listed
  15:34 UTC

patriksimek

Wednesday, October 7

Monday, October 5

Thursday, October 1