https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:22:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-05598 bdu:2022-05598 https://cve.radiocsirt.org/vuln/bdu:2022-05598 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0597 certfr-2023-avi-0597 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0597 https://cve.radiocsirt.org/vuln/cnvd-2022-68930 cnvd-2022-68930 https://cve.radiocsirt.org/vuln/cnvd-2022-68930 https://cve.radiocsirt.org/vuln/euvd-2026-232638 EUVD-2026-232638 https://cve.radiocsirt.org/vuln/euvd-2026-232638 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36067 <p>vm2 is a sandbox that can run untrusted code with whitelisted Node&#39;s built-in modules. In versions prior to version 3.9.11, a threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version 3.9.11 of vm2. There are no known workarounds.</p> <p>vm2 is a sandbox that can run untrusted code with whitelisted Node&#39;s built-in modules. In versions prior to version 3.9.11, a threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version 3.9.11 of vm2. There are no known workarounds.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-36067 https://cve.radiocsirt.org/vuln/ghsa-mrgp-mrhc-5jrq <p><strong>Affected:</strong> npm: vm2</p> <p>### Impact A threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox.</p> <p>### Patches This vulnerability was patched in the release of version `3.9.11` of `vm2`</p> <p>### Workarounds None.</p> <p>### References Github Issue - https://github.com/patriksimek/vm2/issues/467 The file that was patched - https://github.com/patriksimek/vm2/blob/master/lib/setup-sandbox.js#L71 The commit with the patch - https://github.com/patriksimek/vm2/commit/d9a7f3cc995d3d861e1380eafb886cb3c5e2b873#diff-b1a515a627d820118e76d0e323fe2f0589ed50a1eacb490f6c3278fe3698f164</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [VM2](https://github.com/patriksimek/vm2)</p> <p><strong>Affected:</strong> npm: vm2</p> <p>### Impact A threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox.</p> <p>### Patches This vulnerability was patched in the release of version `3.9.11` of `vm2`</p> <p>### Workarounds None.</p> <p>### References Github Issue - https://github.com/patriksimek/vm2/issues/467 The file that was patched - https://github.com/patriksimek/vm2/blob/master/lib/setup-sandbox.js#L71 The commit with the patch - https://github.com/patriksimek/vm2/commit/d9a7f3cc995d3d861e1380eafb886cb3c5e2b873#diff-b1a515a627d820118e76d0e323fe2f0589ed50a1eacb490f6c3278fe3698f164</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [VM2](https://github.com/patriksimek/vm2)</p> https://cve.radiocsirt.org/vuln/ghsa-mrgp-mrhc-5jrq https://cve.radiocsirt.org/vuln/gsd-2022-36067 gsd-2022-36067 https://cve.radiocsirt.org/vuln/gsd-2022-36067 https://cve.radiocsirt.org/vuln/rhsa-2022:6422 <p>moment: inefficient parsing algorithm resulting in DoS vm2: Sandbox Escape in vm2</p> <p>moment: inefficient parsing algorithm resulting in DoS vm2: Sandbox Escape in vm2</p> https://cve.radiocsirt.org/vuln/rhsa-2022:6422 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1004 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um aus der Sandbox auszubrechen und beliebigen Code im Host-Kontext auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um aus der Sandbox auszubrechen und beliebigen Code im Host-Kontext auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1004