https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:22:44.446886+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05598 bdu:2022-05598 2026-10-03T00:22:44.463375+00:00 bdu:2022-05598 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0597 certfr-2023-avi-0597 — De multiples vulnérabilités ont été découvertes dans<span class="textit"> IBM Cognos Analytics</span>. Certaines d'entr… 2026-10-03T00:22:44.463413+00:00 certfr-2023-avi-0597 https://cve.radiocsirt.org/vuln/cnvd-2022-68930 cnvd-2022-68930 2026-10-03T00:22:44.463432+00:00 cnvd-2022-68930 https://cve.radiocsirt.org/vuln/euvd-2026-232638 EUVD-2026-232638 2026-10-03T00:22:44.463443+00:00 EUVD-2026-232638 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36067 fkie_cve-2022-36067 2026-10-03T00:22:44.463453+00:00

vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. In versions prior to version 3.9.11, a threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version 3.9.11 of vm2. There are no known workarounds.

 https://cve.radiocsirt.org/vuln/ghsa-mrgp-mrhc-5jrq GHSA-mrgp-mrhc-5jrq — vm2 vulnerable to Sandbox Escape resulting in Remote Code Execution on host 2026-10-03T00:22:44.463482+00:00

Affected: npm: vm2

### Impact A threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox.

### Patches This vulnerability was patched in the release of version `3.9.11` of `vm2`

### Workarounds None.

### References Github Issue - https://github.com/patriksimek/vm2/issues/467 The file that was patched - https://github.com/patriksimek/vm2/blob/master/lib/setup-sandbox.js#L71 The commit with the patch - https://github.com/patriksimek/vm2/commit/d9a7f3cc995d3d861e1380eafb886cb3c5e2b873#diff-b1a515a627d820118e76d0e323fe2f0589ed50a1eacb490f6c3278fe3698f164

### For more information If you have any questions or comments about this advisory: * Open an issue in [VM2](https://github.com/patriksimek/vm2)

 https://cve.radiocsirt.org/vuln/gsd-2022-36067 gsd-2022-36067 2026-10-03T00:22:44.463512+00:00 gsd-2022-36067 https://cve.radiocsirt.org/vuln/rhsa-2022:6422 RHSA-2022:6422 — Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.0.2 security and bug fixes 2026-10-03T00:22:44.463524+00:00

moment: inefficient parsing algorithm resulting in DoS vm2: Sandbox Escape in vm2

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1004 WID-SEC-W-2023-1004 — vm2: Mehrere Schwachstellen 2026-10-03T00:22:44.463541+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um aus der Sandbox auszubrechen und beliebigen Code im Host-Kontext auszuführen.