https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:06:27 +0000 https://cve.radiocsirt.org/vuln/cve-2026-92951 <p><strong>Affected:</strong> patriksimek vm2</p> <p>vm2 before 3.11.7 contains an incorrect authorization vulnerability in the external package allowlist check that uses non-exact substring matching instead of full package-name boundary validation. Attackers can bypass the allowlist by requiring a colliding package name that contains an allowlisted package substring, causing vm2 to load and execute unauthorized host packages in the host context.</p> <p><strong>Affected:</strong> patriksimek vm2</p> <p>vm2 before 3.11.7 contains an incorrect authorization vulnerability in the external package allowlist check that uses non-exact substring matching instead of full package-name boundary validation. Attackers can bypass the allowlist by requiring a colliding package name that contains an allowlisted package substring, causing vm2 to load and execute unauthorized host packages in the host context.</p> https://cve.radiocsirt.org/vuln/cve-2026-92951 https://cve.radiocsirt.org/vuln/ghsa-c48m-32m9-vx93 <p><strong>Affected:</strong> npm: vm2</p> <p>### Summary</p> <p>vm2 is a sandbox library for isolating and executing untrusted JavaScript code inside a Node.js process. It can restrict access to built-in modules and external packages.</p> <p>When `NodeVM` enables an `external` allowlist together with a custom `resolve` callback, vm2 checks the requested package name with a non-exact match. For example, if the allowlist only permits `left-pad`, an attacker can still bypass the check with a colliding package name such as `evil-left-pad`, because it contains the allowlisted name.</p> <p>If the colliding package already exists in a host path resolvable by the custom resolver, or if the target application&#39;s custom resolver / dependency-management workflow downloads the package and places it in a resolvable path, vm2 loads and executes that package in the host context. This lets sandboxed code bypass the module allowlist and may further lead to host code execution.</p> <p>### Details</p> <p>`NodeVM` supports `require.external` to configure which external npm packages sandboxed code may load. It also supports a custom resolver through `require.resolve`. This combination is commonly used in business plugin systems, user-script platforms, or sandbox execution environments: the application allows only a small set of trusted dependencies while using a custom resolver that points to the application&#39;s own package directory.</p> <p>The vulnerability is in the allowlist pre-check logic before the custom resolver is called. vm2 generates a regular expression from the `e…</p> <p><strong>Affected:</strong> npm: vm2</p> <p>### Summary</p> <p>vm2 is a sandbox library for isolating and executing untrusted JavaScript code inside a Node.js process. It can restrict access to built-in modules and external packages.</p> <p>When `NodeVM` enables an `external` allowlist together with a custom `resolve` callback, vm2 checks the requested package name with a non-exact match. For example, if the allowlist only permits `left-pad`, an attacker can still bypass the check with a colliding package name such as `evil-left-pad`, because it contains the allowlisted name.</p> <p>If the colliding package already exists in a host path resolvable by the custom resolver, or if the target application&#39;s custom resolver / dependency-management workflow downloads the package and places it in a resolvable path, vm2 loads and executes that package in the host context. This lets sandboxed code bypass the module allowlist and may further lead to host code execution.</p> <p>### Details</p> <p>`NodeVM` supports `require.external` to configure which external npm packages sandboxed code may load. It also supports a custom resolver through `require.resolve`. This combination is commonly used in business plugin systems, user-script platforms, or sandbox execution environments: the application allows only a small set of trusted dependencies while using a custom resolver that points to the application&#39;s own package directory.</p> <p>The vulnerability is in the allowlist pre-check logic before the custom resolver is called. vm2 generates a regular expression from the `e…</p> https://cve.radiocsirt.org/vuln/ghsa-c48m-32m9-vx93