https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:22:33.876418+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14924 bdu:2026-14924 2026-10-03T21:22:33.942151+00:00 bdu:2026-14924 https://cve.radiocsirt.org/vuln/euvd-2026-373317 EUVD-2026-373317 2026-10-03T21:22:33.942189+00:00 EUVD-2026-373317 https://cve.radiocsirt.org/vuln/fkie_cve-2026-93605 fkie_cve-2026-93605 2026-10-03T21:22:33.942204+00:00

vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denylist omits child_process despite blocking other host-spawning modules. Attackers can require child_process and execute arbitrary commands on the host system when NodeVM is configured with builtin:['*'] or explicit child_process allowance.

 https://cve.radiocsirt.org/vuln/ghsa-9hxx-m5g2-2q3h GHSA-9hxx-m5g2-2q3h 2026-10-03T21:22:33.942236+00:00

vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denylist omits child_process despite blocking other host-spawning modules. Attackers can require child_process and execute arbitrary commands on the host system when NodeVM is configured with builtin:['*'] or explicit child_process allowance.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3189 WID-SEC-W-2026-3189 — vm2: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-03T21:22:33.942253+00:00

Ein Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um beliebigen Programmcode auszuführen und um die Integrität zu gefähren.