Vulnerabilities in patriksimek

77 results
CVE-2026-24120CRITICALvm2: Sandbox Breakout Through Promise SpeciesEPSS 0.9%CVE-2026-44008CRITICALvm2 has sandbox breakout via `neutralizeArraySpeciesBatch`EPSS 0.9%CVE-2026-92944CRITICALvm2 3.10.2 through 3.11.6 Sandbox Escape via Promise ProtectorEPSS 0.8%CVE-2026-44005CRITICALvm2: Sandbox escapeEPSS 0.8%CVE-2026-44006CRITICALvm2: Sandbox EscapeEPSS 0.8%CVE-2023-32313MEDIUMInspect method manipulation in vm2EPSS 0.8%CVE-2026-92946CRITICALvm2 before 3.11.7 Remote Code Execution via require.externalEPSS 0.8%CVE-2026-92934CRITICALvm2 before 3.11.8 Sandbox Escape RCE via AggregateErrorEPSS 0.8%CVE-2026-47131CRITICALvm2: Sandbox EscapeEPSS 0.8%CVE-2026-93603CRITICALvm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host FunctionEPSS 0.7%CVE-2026-43998HIGHvm2: NodeVM require.root bypass via symlink traversal allows sandbox escapeEPSS 0.7%CVE-2026-93606CRITICALvm2 before 3.12.1 Sandbox Escape via Promise Symbol.speciesEPSS 0.7%CVE-2026-92955CRITICALvm2 before 3.11.8 Sandbox Escape via NodeVMEPSS 0.7%CVE-2026-26332CRITICALvm2: Sandbox EscapeEPSS 0.7%CVE-2026-92948CRITICALvm2 3.9.6 through 3.11.5 Sandbox Escape via node:testEPSS 0.7%CVE-2026-92935CRITICALvm2 NodeVM Remote Code Execution via Array-Shaped RequireEPSS 0.6%CVE-2026-92938CRITICALvm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqliteEPSS 0.6%CVE-2026-92939CRITICALvm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngineEPSS 0.6%CVE-2026-100721CRITICALvm2 before 3.12.2 Authorization Bypass via Custom ResolverEPSS 0.6%CVE-2026-47686CRITICALvm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCEEPSS 0.6%