Vulnerabilities in patriksimek
77 resultsCVE-2026-45411CRITICALvm2: Sandbox Breakout Using Async GeneratorEPSS 0.6%CVE-2026-47683HIGHvm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLikeEPSS 0.5%CVE-2026-92957CRITICALvm2 before 3.11.7 NodeVM Builtin Deny-List Bypass via node: PrefixEPSS 0.5%CVE-2026-92961HIGHvm2 before 3.11.6 Memory Exhaustion DoS via bufferAllocLimit BypassEPSS 0.5%CVE-2026-92956CRITICALvm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreamingEPSS 0.5%CVE-2026-92953CRITICALvm2 3.11.0 through 3.11.7 Prototype Pollution via TypedArrayEPSS 0.5%CVE-2026-92954CRITICALvm2 3.10.0 through 3.11.7 Denial of Service via Host PromiseEPSS 0.5%CVE-2026-92942HIGHvm2 before 3.11.7 Timeout Bypass via FinalizationRegistryEPSS 0.5%CVE-2026-92947CRITICALvm2 before 3.11.7 Memory Disclosure via Buffer PoolEPSS 0.5%CVE-2026-93605CRITICALvm2 NodeVM before 3.12.1 Remote Code Execution via child_processEPSS 0.5%CVE-2026-92960CRITICALvm2 before 3.11.6 Process-wide State Exposure via os and dnsEPSS 0.5%CVE-2026-92951CRITICALvm2 before 3.11.7 Module Allowlist Bypass via Custom ResolverEPSS 0.5%CVE-2026-92952HIGHvm2 3.11.4 through 3.11.6 Sandbox Symbol Filtering BypassEPSS 0.5%CVE-2026-92936MEDIUMvm2 3.11.0 before 3.11.7 Information Disclosure via Error StackEPSS 0.5%CVE-2026-92959HIGHvm2 before 3.11.8 allowAsync Bypass via Promise ThenableEPSS 0.4%CVE-2026-44001HIGHvm2: Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)EPSS 0.4%CVE-2026-92940CRITICALvm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgentEPSS 0.4%CVE-2026-44004HIGHvm2: Host Process OOM DoS via Buffer.alloc (Timeout Bypass)EPSS 0.4%CVE-2026-100723MEDIUMvm2 before 3.12.2 Memory Disclosure via zlib Buffer PoolEPSS 0.4%CVE-2026-92958HIGHvm2 before 3.11.7 Denylist Bypass via fs/promisesEPSS 0.4%