{ "schemaVersion": 1, "site": "https://cveboard.org", "generatedAt": "2026-10-23T19:18:17.461Z", "lastRun": "2026-10-23T19:01:02.861Z", "liveDays": 14, "filters": { "kind": null, "exploited": false, "severity": null, "ecosystems": [], "tag": "patriksimek" }, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "incidents": [ { "id": "cve-2026-93605", "url": "https://cveboard.org/i/cve-2026-93605", "urlPt": "https://cveboard.org/pt/i/cve-2026-93605", "json": "https://cveboard.org/i/cve-2026-93605.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2 contains a sandbox escape vulnerability", "summary": "vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denylist omits child_process despite blocking other host-spawning modules. Attackers can require child_process and execute arbitrary commands on the host system when NodeVM is configured with builtin:['*'] or explicit child_process allowance.", "titlePt": "vm2 contém uma vulnerabilidade de escape de sandbox", "summaryPt": "Versões do vm2 NodeVM anteriores à 3.12.1 contêm uma vulnerabilidade de escape de sandbox onde a lista de negação DANGEROUS_BUILTINS omite child_process apesar de bloquear outros módulos de geração de host. Os atacantes podem exigir child_process e executar comandos arbitrários no sistema host quando NodeVM é configurado com builtin:['*'] ou permissão explícita de child_process.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "affected", "lessThan": "3.12.1", "lessThanOrEqual": null }, { "version": "3.12.1", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.12.1" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-pq68-rvw4-xp4r", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-693", "name": "Protection Mechanism Failure" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-09-21T17:57:09.752Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-93605" ], "ghsa": "GHSA-pq68-rvw4-xp4r", "cvss": { "score": 10, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00726, "percentile": 0.5363, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": "<= 3.12.0", "fixed": "3.12.1", "advisory": "GHSA-pq68-rvw4-xp4r" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-pq68-rvw4-xp4r" } ], "publishedAt": "2026-10-07T18:05:00.000Z", "updatedAt": "2026-10-07T18:05:00.000Z" }, { "id": "cve-2026-100721", "url": "https://cveboard.org/i/cve-2026-100721", "urlPt": "https://cveboard.org/pt/i/cve-2026-100721", "json": "https://cveboard.org/i/cve-2026-100721.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2: NodeVM custom resolution bypasses external path boundaries", "summary": "At source revision 91034466bfb7f56b95fd48083ec6ca36d058f164 of vm2 3.11.8, an untrusted NodeVM guest can turn one allowlisted custom-resolved module into authorization for a separate file whose path merely shares the resolved path's string prefix. LegacyResolver.customResolve stores the resolved path in this.", "titlePt": "vm2: contorno de resolução personalizada do NodeVM ignora os limites do caminho externo", "summaryPt": "Na revisão de origem 91034466bfb7f56b95fd48083ec6ca36d058f164 do vm2 3.11.8, um convidado NodeVM não confiável pode transformar um módulo custom-resolvido permitido em autorização para um arquivo separado cujo caminho compartilha apenas o prefixo de string do caminho resolvido. LegacyResolver.customResolve armazena o caminho resolvido aqui.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "affected", "lessThan": "3.12.2", "lessThanOrEqual": null }, { "version": "3.12.2", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.12.2" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-5h3f-q97h-ccvc", "tag": "vendor-advisory" }, { "url": "https://github.com/patriksimek/vm2/commit/6ac3916da84e060c403e407b6b6318fcc66b0e72", "tag": "patch" }, { "url": "https://github.com/patriksimek/vm2/commit/ab4ee7d803e8c80155e9eb3672226bddbca4aa9c", "tag": "patch" }, { "url": "https://github.com/patriksimek/vm2/commit/91034466bfb7f56b95fd48083ec6ca36d058f164", "tag": "patch" } ], "cwes": [ { "id": "CWE-863", "name": "Incorrect Authorization" } ], "ssvc": { "exploitation": "poc", "automatable": "no", "impact": "total", "at": "2026-09-28T16:50:50.404Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-100721" ], "ghsa": "GHSA-5h3f-q97h-ccvc", "cvss": { "score": 9.5, "version": "4.0", "by": "GitHub" }, "epss": { "percentage": 0.004, "percentile": 0.33094, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": "<= 3.12.1", "fixed": "3.12.2", "advisory": "GHSA-5h3f-q97h-ccvc" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-5h3f-q97h-ccvc" } ], "publishedAt": "2026-10-05T23:24:29.000Z", "updatedAt": "2026-10-05T23:24:29.000Z" }, { "id": "cve-2026-92955", "url": "https://cveboard.org/i/cve-2026-92955", "urlPt": "https://cveboard.org/pt/i/cve-2026-92955", "json": "https://cveboard.org/i/cve-2026-92955.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2: Sandbox Escape (NodeVM)", "summary": "It being possible to obtain the host proto getter/setter, has been used in many reports:", "titlePt": "vm2: Escape do sandbox (NodeVM)", "summaryPt": "É possível obter o getter/setter do proto do host, o que tem sido usado em muitos relatórios:", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "affected", "lessThan": "3.11.8", "lessThanOrEqual": null }, { "version": "3.11.8", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.8" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-88hf-g992-jg85", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-913", "name": "Improper Control of Dynamically-Managed Code Resources" } ], "ssvc": { "exploitation": "poc", "automatable": "yes", "impact": "total", "at": "2026-09-17T14:23:07.314Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92955" ], "ghsa": "GHSA-88hf-g992-jg85", "cvss": { "score": 10, "version": "4.0", "by": "GitHub" }, "epss": { "percentage": 0.00712, "percentile": 0.53103, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": "<= 3.11.7", "fixed": "3.11.8", "advisory": "GHSA-88hf-g992-jg85" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-88hf-g992-jg85" } ], "publishedAt": "2026-10-05T22:47:09.000Z", "updatedAt": "2026-10-05T22:47:09.000Z" }, { "id": "cve-2026-92954", "url": "https://cveboard.org/i/cve-2026-92954", "urlPt": "https://cveboard.org/pt/i/cve-2026-92954", "json": "https://cveboard.org/i/cve-2026-92954.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process", "summary": "vm2 current head (v3.11.5, commit 7a1f5100b96f48d34e0fe104ab37c0acc5944f92) can still be used to terminate the host Node.js process when sandbox code calls a host-realm function that returns a rejected host Promise and then ignores the returned value.", "titlePt": "vm2: A rejeição de Promise retornada pelo host pode contornar o endurecimento de rejeição não tratada do vm2 e encerrar o processo host", "summaryPt": "vm2 atual head (v3.11.5, commit 7a1f5100b96f48d34e0fe104ab37c0acc5944f92) ainda pode ser usado para encerrar o processo Node.js host quando o código de sandbox chama uma função do host-realm que retorna uma Promise rejeitada do host e, em seguida, ignora o valor retornado.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "3.10.0", "status": "affected", "lessThan": "3.11.8", "lessThanOrEqual": null }, { "version": "3.11.8", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.8" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-gjq8-xm47-88rc", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-248", "name": "Uncaught Exception" } ], "ssvc": { "exploitation": "poc", "automatable": "yes", "impact": "partial", "at": "2026-09-21T17:15:31.102Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92954" ], "ghsa": "GHSA-gjq8-xm47-88rc", "cvss": { "score": 9.2, "version": "4.0", "by": "GitHub" }, "epss": { "percentage": 0.00488, "percentile": 0.41103, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": ">= 3.10.0, <= 3.11.7", "fixed": "3.11.8", "advisory": "GHSA-gjq8-xm47-88rc" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-gjq8-xm47-88rc" } ], "publishedAt": "2026-10-05T22:45:48.000Z", "updatedAt": "2026-10-05T22:45:48.000Z" }, { "id": "cve-2026-92953", "url": "https://cveboard.org/i/cve-2026-92953", "urlPt": "https://cveboard.org/pt/i/cve-2026-92953", "json": "https://cveboard.org/i/cve-2026-92953.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix", "summary": "vm2's current host-intrinsic prototype protection is incomplete. The fix for GHSA-vwrp-x96c-mhwq blocks sandbox writes into classic host intrinsics such as Object.prototype, Array.prototype, and Function.prototype, but current head still lets sandbox code in a default VM reach and mutate host Uint8Array.prototype, %TypedArray%.prototype, and ArrayBuffer.prototype.", "titlePt": "vm2: A VM padrão pode mutar intrínsecos host TypedArray e ArrayBuffer após o reparo da poluição do protótipo do host", "summaryPt": "A proteção atual do protótipo de intrínseco do host do vm2 é incompleta. O reparo para GHSA-vwrp-x96c-mhwq bloqueia escritas de sandbox em intrínsecos do host clássicos, como Object.prototype, Array.prototype e Function.prototype, mas o código atual do sandbox em uma VM padrão ainda pode alcançar e mutar host Uint8Array.prototype, %TypedArray%.prototype e ArrayBuffer.prototype.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "3.11.0", "status": "affected", "lessThan": "3.11.8", "lessThanOrEqual": null }, { "version": "3.11.8", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.8" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-3vgf-8m4q-q4qr", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-913", "name": "Improper Control of Dynamically-Managed Code Resources" } ], "ssvc": { "exploitation": "poc", "automatable": "yes", "impact": "partial", "at": "2026-09-18T19:49:26.841Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92953" ], "ghsa": "GHSA-3vgf-8m4q-q4qr", "cvss": { "score": 9.3, "version": "4.0", "by": "GitHub" }, "epss": { "percentage": 0.00501, "percentile": 0.42028, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": ">= 3.11.0, <= 3.11.7", "fixed": "3.11.8", "advisory": "GHSA-3vgf-8m4q-q4qr" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-3vgf-8m4q-q4qr" } ], "publishedAt": "2026-10-05T22:45:22.000Z", "updatedAt": "2026-10-05T22:45:22.000Z" }, { "id": "cve-2026-92934", "url": "https://cveboard.org/i/cve-2026-92934", "urlPt": "https://cveboard.org/pt/i/cve-2026-92934", "json": "https://cveboard.org/i/cve-2026-92934.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit", "summary": "vm2 3.11.6 (this fork's latest release) contains an incomplete-fix bypass of the Error.cause host-reference sanitization added in GHSA-m283-3h24-438v (commit 7e3faaf). Sandbox code that catches a host-wrapped AggregateError which is *revisited within a single handleException traversal* (self-cycle, mutual-cycle, or the same host aggregate referenced twice in errors[]) receives a live, unsanitized…", "titlePt": "escape de sandbox vm2 para execução remota de código no host via contornagem revisitada de AggregateError envolvido pelo host que contorna o ciclo de curto-circuito de sanitização de erro", "summaryPt": "vm2 3.11.6 (a última versão deste fork) contém uma contornagem de correção incompleta da sanitização de referência do host Error.cause adicionada em GHSA-m283-3h24-438v (commit 7e3faaf). Código de sandbox que captura um AggregateError envolvido pelo host que é *revisitado dentro de uma única travessia handleException* (auto-ciclo, ciclo mútuo ou o mesmo agregado do host referenciado duas vezes em errors[]) recebe um objeto vivo, não sanitizado…", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "affected", "lessThan": "3.11.8", "lessThanOrEqual": null }, { "version": "3.11.8", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.8" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-x965-fc75-jpqh", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-693", "name": "Protection Mechanism Failure" } ], "ssvc": { "exploitation": "poc", "automatable": "no", "impact": "total", "at": "2026-09-17T14:26:55.310Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92934" ], "ghsa": "GHSA-x965-fc75-jpqh", "cvss": { "score": 9.5, "version": "4.0", "by": "GitHub" }, "epss": { "percentage": 0.00762, "percentile": 0.54874, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": "<= 3.11.7", "fixed": "3.11.8", "advisory": "GHSA-x965-fc75-jpqh" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-x965-fc75-jpqh" } ], "publishedAt": "2026-10-05T22:38:04.000Z", "updatedAt": "2026-10-05T22:38:04.000Z" }, { "id": "cve-2026-92946", "url": "https://cveboard.org/i/cve-2026-92946", "urlPt": "https://cveboard.org/pt/i/cve-2026-92946", "json": "https://cveboard.org/i/cve-2026-92946.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE", "summary": "NodeVM's require.external option lets sandboxed code require() local files and npm packages. When require.external is enabled and require.root is not explicitly set to a path that excludes node_modules, two defaults combine to fully defeat the sandbox:", "titlePt": "vm2: Acesso irrestrito ao sistema de arquivos do host e RCE total com `require.external` sem um `require.root` explícito", "summaryPt": "A opção require.external do NodeVM permite que o código em sandbox utilize require() para arquivos locais e pacotes npm. Quando require.external está habilitado e require.root não é explicitamente definido para um caminho que exclui node_modules, dois padrões se combinam para derrotar completamente o sandbox:", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-j3hm-6rg5-mchv", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-913", "name": "Improper Control of Dynamically-Managed Code Resources" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-09-17T19:18:11.290Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92946" ], "ghsa": "GHSA-j3hm-6rg5-mchv", "cvss": { "score": 10, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00857, "percentile": 0.58027, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": "<= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-j3hm-6rg5-mchv" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-j3hm-6rg5-mchv" } ], "publishedAt": "2026-10-05T22:34:50.000Z", "updatedAt": "2026-10-05T22:34:50.000Z" }, { "id": "cve-2026-92947", "url": "https://cveboard.org/i/cve-2026-92947", "urlPt": "https://cveboard.org/pt/i/cve-2026-92947", "json": "https://cveboard.org/i/cve-2026-92947.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool", "summary": "Sandboxed code is able to disclose host memory used by small allocations by Buffer.from, Buffer.concat.", "titlePt": "vm2: código em sandbox pode ler e escrever a memória do realm do host via o pool de Buffer compartilhado do Node", "summaryPt": "Código em sandbox é capaz de expor a memória do host usada por pequenas alocações de Buffer.from, Buffer.concat.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-fcqc-726x-5wfc", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" } ], "ssvc": { "exploitation": "poc", "automatable": "yes", "impact": "total", "at": "2026-09-17T15:46:48.210Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92947" ], "ghsa": "GHSA-fcqc-726x-5wfc", "cvss": { "score": 10, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00482, "percentile": 0.40644, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": "<= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-fcqc-726x-5wfc" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-fcqc-726x-5wfc" } ], "publishedAt": "2026-10-05T22:34:35.000Z", "updatedAt": "2026-10-05T22:34:35.000Z" }, { "id": "cve-2026-92956", "url": "https://cveboard.org/i/cve-2026-92956", "urlPt": "https://cveboard.org/pt/i/cve-2026-92956", "json": "https://cveboard.org/i/cve-2026-92956.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass", "summary": "There is a sandbox escape in vm2 3.11.5 / current HEAD when it is used on Node.js 26. The issue is reachable from a default new VM() sandbox. No NodeVM, require permission, host object injection, or intentionally unsafe configuration is required.", "titlePt": "Fuga de sandbox vm2 via bypass de espécie Promise do WebAssembly.compileStreaming", "summaryPt": "Há uma fuga de sandbox no vm2 3.11.5 / HEAD atual quando ele é usado no Node.js 26. O problema é alcançável a partir de um sandbox padrão new VM(). Não é necessário NodeVM, permissão de require, injeção de objeto host ou configuração intencionalmente insegura.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "3.10.1", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-wjwh-qqvp-g4p4", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-693", "name": "Protection Mechanism Failure" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "total", "at": "2026-09-17T19:18:13.498Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92956" ], "ghsa": "GHSA-wjwh-qqvp-g4p4", "cvss": { "score": 10, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00587, "percentile": 0.47384, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": ">= 3.10.1, <= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-wjwh-qqvp-g4p4" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-wjwh-qqvp-g4p4" } ], "publishedAt": "2026-10-05T22:34:22.000Z", "updatedAt": "2026-10-05T22:34:22.000Z" }, { "id": "cve-2026-92948", "url": "https://cveboard.org/i/cve-2026-92948", "urlPt": "https://cveboard.org/pt/i/cve-2026-92948", "json": "https://cveboard.org/i/cve-2026-92948.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape", "summary": "On Node.js 24 and newer, vm2 can expose the host node:test module to sandboxed NodeVM code when the embedder explicitly allows the node:test builtin. Sandbox code can reach that module through require('node:node:test') and call run() with attacker-controlled execArgv.", "titlePt": "vm2: contorno da lista de permissões builtin do NodeVM via node:test.run() permite escape do sandbox.", "summaryPt": "No Node.js 24 e versões mais recentes, o vm2 pode expor o módulo host node:test para o código NodeVM em sandbox quando o incorporador permite explicitamente o builtin node:test. O código em sandbox pode acessar esse módulo através de require('node:node:test') e chamar run() com execArgv controlado pelo atacante.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "3.9.6", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-qhwx-74w5-xhxq", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-693", "name": "Protection Mechanism Failure" } ], "ssvc": { "exploitation": "poc", "automatable": "no", "impact": "total", "at": "2026-09-18T19:31:46.698Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92948" ], "ghsa": "GHSA-qhwx-74w5-xhxq", "cvss": { "score": 9.9, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00654, "percentile": 0.50731, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": ">= 3.9.6, <= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-qhwx-74w5-xhxq" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-qhwx-74w5-xhxq" } ], "publishedAt": "2026-10-01T15:41:31.000Z", "updatedAt": "2026-10-01T15:41:31.000Z" }, { "id": "cve-2026-92940", "url": "https://cveboard.org/i/cve-2026-92940", "urlPt": "https://cveboard.org/pt/i/cve-2026-92940", "json": "https://cveboard.org/i/cve-2026-92940.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2 exposes host HTTPS credentials and TLS traffic through globalAgent", "summary": "vm2 3.11.6 exposes the host process's real https.globalAgent when a NodeVM is explicitly allowed to require https. The module is wrapped as read-only, but calls to methods on the shared agent still mutate the host object. Sandbox code can register a free listener and receive host request options and the host TLS socket whenever an unrelated host HTTPS request releases a pooled connection.", "titlePt": "vm2 expõe credenciais HTTPS do host e tráfego TLS através do globalAgent", "summaryPt": "vm2 3.11.6 expõe o https.globalAgent real do processo host quando um NodeVM é explicitamente permitido a requerer https. O módulo é envolvido como somente leitura, mas chamadas a métodos no agente compartilhado ainda mutam o objeto host. Código de sandbox pode registrar um ouvinte livre e receber opções de solicitação do host e o socket TLS do host sempre que uma solicitação HTTPS do host não relacionada libera uma conexão em pool.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "3.11.3", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-h85j-hv3c-qfgq", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-668", "name": "Exposure of Resource to Wrong Sphere" } ], "ssvc": { "exploitation": "none", "automatable": "yes", "impact": "partial", "at": "2026-09-17T19:15:53.494Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92940" ], "ghsa": "GHSA-h85j-hv3c-qfgq", "cvss": { "score": 10, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00474, "percentile": 0.40045, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": ">= 3.11.3, <= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-h85j-hv3c-qfgq" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-h85j-hv3c-qfgq" } ], "publishedAt": "2026-10-01T15:38:26.000Z", "updatedAt": "2026-10-01T15:38:26.000Z" }, { "id": "cve-2026-92951", "url": "https://cveboard.org/i/cve-2026-92951", "urlPt": "https://cveboard.org/pt/i/cve-2026-92951", "json": "https://cveboard.org/i/cve-2026-92951.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package", "summary": "vm2 is a sandbox library for isolating and executing untrusted JavaScript code inside a Node.js process. It can restrict access to built-in modules and external packages.", "titlePt": "O Resolvedor de Módulos Personalizado do vm2 Pode Contornar a Lista de Permissão de Pacotes Externos Carregando um Pacote Host Colidente", "summaryPt": "vm2 é uma biblioteca de sandbox para isolar e executar código JavaScript não confiável dentro de um processo Node.js. Ela pode restringir o acesso a módulos integrados e pacotes externos.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-c48m-32m9-vx93", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-706", "name": "Use of Incorrectly-Resolved Name or Reference" } ], "ssvc": { "exploitation": "none", "automatable": "no", "impact": "total", "at": "2026-09-17T18:57:28.158Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92951" ], "ghsa": "GHSA-c48m-32m9-vx93", "cvss": { "score": 9.9, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00539, "percentile": 0.44601, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": "<= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-c48m-32m9-vx93" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-c48m-32m9-vx93" } ], "publishedAt": "2026-10-01T15:37:19.000Z", "updatedAt": "2026-10-01T15:37:19.000Z" }, { "id": "cve-2026-92957", "url": "https://cveboard.org/i/cve-2026-92957", "urlPt": "https://cveboard.org/pt/i/cve-2026-92957", "json": "https://cveboard.org/i/cve-2026-92957.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process", "summary": "NodeVM normalizes node:-prefixed builtin specifiers during require() resolution, but it does not normalize user-provided negative builtin entries in wildcard policy.", "titlePt": "vm2: bypass de negação de builtin prefixado com node:- no child_process expõe o NodeVM", "summaryPt": "NodeVM normaliza especificadores de builtin prefixados com node:- durante a resolução do require(), mas não normaliza entradas de builtin negativas fornecidas pelo usuário na política de wildcard.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "0", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-8686-vhfx-7r3j", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-269", "name": "Improper Privilege Management" } ], "ssvc": { "exploitation": "poc", "automatable": "no", "impact": "total", "at": "2026-09-17T17:24:58.866Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92957" ], "ghsa": "GHSA-8686-vhfx-7r3j", "cvss": { "score": 9.9, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00537, "percentile": 0.4445, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": "<= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-8686-vhfx-7r3j" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-8686-vhfx-7r3j" } ], "publishedAt": "2026-10-01T15:36:01.000Z", "updatedAt": "2026-10-01T15:36:01.000Z" }, { "id": "cve-2026-92935", "url": "https://cveboard.org/i/cve-2026-92935", "urlPt": "https://cveboard.org/pt/i/cve-2026-92935", "json": "https://cveboard.org/i/cve-2026-92935.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE", "summary": "The NodeVM constructor computes hasRealRequireConfig using typeof requireOpts === 'object' && requireOpts !== null, so require: [] bypasses the guard intended to reject nesting without an explicit require configuration. makeResolverFromLegacyOptions() then destructures the array to undefined option fields and returns a resolver containing only NESTING_OVERRIDE.vm2.", "titlePt": "vm2: guarda de aninhamento do NodeVM aceita require em forma de array e permite execução remota de código no host", "summaryPt": "O construtor NodeVM calcula hasRealRequireConfig usando typeof requireOpts === 'object' && requireOpts !== null, então require: [] contorna a guarda destinada a rejeitar aninhamento sem uma configuração de require explícita. makeResolverFromLegacyOptions() então desestrutura o array para campos de opções indefinidos e retorna um resolver contendo apenas NESTING_OVERRIDE.vm2.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "3.11.4", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-8hr7-r645-pc6w", "tag": "vendor-advisory" }, { "url": "https://github.com/patriksimek/vm2/commit/54b54b74a382577f0bcd0538c5bf99acdcd7f53b", "tag": "patch" } ], "cwes": [ { "id": "CWE-913", "name": "Improper Control of Dynamically-Managed Code Resources" } ], "ssvc": { "exploitation": "none", "automatable": "no", "impact": "total", "at": "2026-09-17T18:57:25.525Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92935" ], "ghsa": "GHSA-8hr7-r645-pc6w", "cvss": { "score": 9, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00673, "percentile": 0.51535, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": ">= 3.11.4, <= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-8hr7-r645-pc6w" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-8hr7-r645-pc6w" } ], "publishedAt": "2026-10-01T15:34:58.000Z", "updatedAt": "2026-10-01T15:34:58.000Z" }, { "id": "cve-2026-92937", "url": "https://cveboard.org/i/cve-2026-92937", "urlPt": "https://cveboard.org/pt/i/cve-2026-92937", "json": "https://cveboard.org/i/cve-2026-92937.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection", "summary": "Untrusted JavaScript run by vm2 can escape the sandbox and execute arbitrary commands in the host Node.js process when an embedder-exposed host Promise rejects. This is an incomplete fix for GHSA-m283-3h24-438v: the advisory's capability-bearing rejection rebuild runs only through this direct Promise-handler path, so call/apply indirection bypasses the protection it introduced.", "titlePt": "vm2: contorno do fix GHSA-m283-3h24-438v leva à execução remota de código no host via indireção de call/apply", "summaryPt": "JavaScript não confiável executado pelo vm2 pode escapar do sandbox e executar comandos arbitrários no processo Node.js host quando uma Promise exposta pelo host é rejeitada. Trata-se de uma correção incompleta para GHSA-m283-3h24-438v: a reconstrução da rejeição portadora de capacidade do aviso só ocorre por meio deste caminho direto do manipulador de Promise, portanto a indireção de call/apply contorna a proteção que introduziu.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "3.11.6", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-647f-g98j-qq25", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-94", "name": "Improper Control of Generation of Code ('Code Injection')" } ], "ssvc": { "exploitation": "poc", "automatable": "yes", "impact": "total", "at": "2026-09-18T19:25:43.226Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92937" ], "ghsa": "GHSA-647f-g98j-qq25", "cvss": { "score": 10, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.01033, "percentile": 0.63539, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": "= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-647f-g98j-qq25" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-647f-g98j-qq25" } ], "publishedAt": "2026-10-01T15:32:10.000Z", "updatedAt": "2026-10-01T15:32:10.000Z" }, { "id": "cve-2026-92938", "url": "https://cveboard.org/i/cve-2026-92938", "urlPt": "https://cveboard.org/pt/i/cve-2026-92938", "json": "https://cveboard.org/i/cve-2026-92938.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2 allows a sandboxed plugin to execute native code through `node:sqlite`", "summary": "vm2 3.11.6 exposes Node.js's host node:sqlite module to NodeVM code when that builtin is allowed explicitly or through builtin: ['*']. The module is wrapped as read-only, but callable methods retain host-process authority. A sandboxed plugin can construct an in-memory database with extension loading enabled and call DatabaseSync.loadExtension() on a native library bundled in the plugin directory.", "titlePt": "vm2 permite que um plugin sandboxed execute código nativo através de `node:sqlite`", "summaryPt": "vm2 3.11.6 expõe o módulo host node:sqlite do Node.js para o código NodeVM quando esse módulo interno é permitido explicitamente ou através de builtin: ['*']. O módulo é envolvido como somente leitura, mas os métodos chamáveis retêm a autoridade do processo host. Um plugin sandboxed pode construir um banco de dados em memória com carregamento de extensão habilitado e chamar DatabaseSync.loadExtension() em uma biblioteca nativa empacotada no diretório do plugin.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "3.11.3", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-6w8r-xxw2-g3hx", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-693", "name": "Protection Mechanism Failure" } ], "ssvc": { "exploitation": "poc", "automatable": "no", "impact": "total", "at": "2026-09-19T02:28:04.824Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92938" ], "ghsa": "GHSA-6w8r-xxw2-g3hx", "cvss": { "score": 9.9, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00616, "percentile": 0.48901, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": ">= 3.11.3, <= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-6w8r-xxw2-g3hx" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-6w8r-xxw2-g3hx" } ], "publishedAt": "2026-10-01T15:29:04.000Z", "updatedAt": "2026-10-01T15:29:04.000Z" }, { "id": "cve-2026-92939", "url": "https://cveboard.org/i/cve-2026-92939", "urlPt": "https://cveboard.org/pt/i/cve-2026-92939", "json": "https://cveboard.org/i/cve-2026-92939.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2 crypto builtin loads attacker native code through setEngine", "summary": "vm2 3.11.6 exposes the host crypto module to a NodeVM when that single builtin is allowed. The module is presented through a read-only bridge, but its functions still execute with host-process authority. crypto.setEngine() accepts a filesystem path and asks OpenSSL to dynamically load the referenced native library.", "titlePt": "vm2 crypto builtin carrega código nativo do atacante através de setEngine", "summaryPt": "vm2 3.11.6 expõe o módulo crypto do host para um NodeVM quando esse único builtin é permitido. O módulo é apresentado através de uma ponte de leitura apenas, mas suas funções ainda executam com autoridade do processo host. crypto.setEngine() aceita um caminho do sistema de arquivos e solicita ao OpenSSL que carregue dinamicamente a biblioteca nativa referenciada.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "3.11.3", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-46pr-c5wc-xffx", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-114", "name": "Process Control" } ], "ssvc": { "exploitation": "poc", "automatable": "no", "impact": "total", "at": "2026-09-17T14:26:12.253Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92939" ], "ghsa": "GHSA-46pr-c5wc-xffx", "cvss": { "score": 9.9, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00616, "percentile": 0.489, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": ">= 3.11.3, <= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-46pr-c5wc-xffx" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-46pr-c5wc-xffx" } ], "publishedAt": "2026-10-01T15:28:36.000Z", "updatedAt": "2026-10-01T15:28:36.000Z" }, { "id": "cve-2026-92944", "url": "https://cveboard.org/i/cve-2026-92944", "urlPt": "https://cveboard.org/pt/i/cve-2026-92944", "json": "https://cveboard.org/i/cve-2026-92944.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector", "summary": "Name or handle: [YMsora] - Report date: 2026-08-14", "titlePt": "escape de sandbox vm2 no Node.js 26 através de um protector PromiseThenLookupChain obsoleto", "summaryPt": "Nome ou identificador: [YMsora] - Data do relatório: 2026-08-14", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "3.10.2", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-27g9-p43v-cw3v", "tag": "vendor-advisory" }, { "url": "https://github.com/patriksimek/vm2/commit/7b26e81087ec88c287d9a4812f969d412f32774e", "tag": "patch" }, { "url": "https://github.com/patriksimek/vm2/commit/4635ddd85839461c8ad791990023a477efefe7bd", "tag": "patch" } ], "cwes": [ { "id": "CWE-693", "name": "Protection Mechanism Failure" } ], "ssvc": { "exploitation": "poc", "automatable": "yes", "impact": "total", "at": "2026-09-19T02:30:37.300Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92944" ], "ghsa": "GHSA-27g9-p43v-cw3v", "cvss": { "score": 9.8, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00841, "percentile": 0.57497, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": ">= 3.10.2, <= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-27g9-p43v-cw3v" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-27g9-p43v-cw3v" } ], "publishedAt": "2026-10-01T15:28:07.000Z", "updatedAt": "2026-10-01T15:28:07.000Z" }, { "id": "cve-2026-92941", "url": "https://cveboard.org/i/cve-2026-92941", "urlPt": "https://cveboard.org/pt/i/cve-2026-92941", "json": "https://cveboard.org/i/cve-2026-92941.json", "kind": "vuln", "live": false, "knownExploited": false, "severity": "critical", "title": "vm2 NodeVM can replace the host process TLS trust store", "summary": "vm2 3.11.6 exposes the host tls module to a NodeVM when that builtin is explicitly allowed. Although the module object is wrapped as read-only, its functions still execute against process-wide host state. On Node.js versions that provide tls.setDefaultCACertificates(), sandbox code can replace the certificate authorities trusted by subsequent host-realm TLS clients.", "titlePt": "vm2 NodeVM pode substituir o armazenamento de confiança TLS do processo host", "summaryPt": "vm2 3.11.6 expõe o módulo tls do host a um NodeVM quando esse módulo embutido é explicitamente permitido. Embora o objeto do módulo seja envolvido como somente leitura, suas funções ainda são executadas contra o estado do host em todo o processo. Em versões do Node.js que fornecem tls.setDefaultCACertificates(), o código de sandbox pode substituir as autoridades certificadoras confiáveis por clientes TLS subsequentes do host-realm.", "affected": [ { "vendor": "patriksimek", "product": "vm2", "defaultStatus": "unaffected", "versions": [ { "version": "3.11.3", "status": "affected", "lessThan": "3.11.7", "lessThanOrEqual": null }, { "version": "3.11.7", "status": "unaffected", "lessThan": null, "lessThanOrEqual": null } ], "omitted": 0, "fixed": [ "3.11.7" ] } ], "omitted": 0, "references": [ { "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-98xx-8mx4-x7cm", "tag": "vendor-advisory" } ], "cwes": [ { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" } ], "ssvc": { "exploitation": "poc", "automatable": "yes", "impact": "total", "at": "2026-09-17T15:48:37.206Z" }, "fix": "listed", "tags": [ "patriksimek", "npm" ], "cves": [ "CVE-2026-92941" ], "ghsa": "GHSA-98xx-8mx4-x7cm", "cvss": { "score": 10, "version": "3.1", "by": "GitHub" }, "epss": { "percentage": 0.00289, "percentile": 0.20373, "asOf": "2026-10-23", "by": "FIRST" }, "packages": [ { "ecosystem": "npm", "name": "vm2", "vulnerable": ">= 3.11.3, <= 3.11.6", "fixed": "3.11.7", "advisory": "GHSA-98xx-8mx4-x7cm" } ], "vendor": "patriksimek", "product": "vm2", "kev": null, "breach": null, "retracted": false, "sources": [ { "label": "GitHub Advisory Database", "url": "https://github.com/advisories/GHSA-98xx-8mx4-x7cm" } ], "publishedAt": "2026-10-01T15:27:28.000Z", "updatedAt": "2026-10-01T15:27:28.000Z" } ], "tag": { "tag": "patriksimek", "name": "patriksimek", "kev": null } }