Vulnerabilities in patriksimek

74 results
Vexday analysis

Patriksimek apresenta 37 vulnerabilidades catalogadas, com 28 publicadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Embora nenhuma esteja sob exploração ativa conhecida, 26 são críticas (70% do portfólio), predominantemente ligadas a problemas de proteção de mecanismos de segurança (CWE-693), representando risco significativo para ambientes em produção.

CVE-2026-92959HIGHvm2 before 3.11.8 allowAsync Bypass via Promise ThenableEPSS 0.4%CVE-2026-47135HIGHvm2: Sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checksEPSS 0.4%CVE-2026-92958HIGHvm2 before 3.11.7 Denylist Bypass via fs/promisesEPSS 0.4%CVE-2026-92933MEDIUMvm2 before 3.11.8 Information Disclosure via util.getCallSitesEPSS 0.4%CVE-2026-44003MEDIUMvm2: Transformer Fast-Path Bypass Exposes Internal State VariableEPSS 0.4%CVE-2026-93604MEDIUMvm2 3.11.8 Sandbox Escape via crypto.setFipsEPSS 0.3%CVE-2026-92963MEDIUMvm2 before 3.11.2 Information Disclosure via Internal StateEPSS 0.3%CVE-2026-44002MEDIUMvm2: Host File Path Disclosure via Stack Trace Information LeakEPSS 0.3%CVE-2026-92949MEDIUMvm2 3.9.6 before 3.11.7 Sandbox Bypass via Accessor DescriptorEPSS 0.3%CVE-2026-44000MEDIUMvm2: sandbox boundary bypass via host Promise resolution preserving host object identityEPSS 0.3%CVE-2026-92941CRITICALvm2 3.11.3 before 3.11.7 TLS Trust Store ManipulationEPSS 0.3%CVE-2026-92945LOWvm2 before 3.11.7 Module Allowlist Bypass via Prefix MatchingEPSS 0.3%CVE-2026-92950CRITICALvm2 before 3.11.7 Sandbox Escape via CLI requireEPSS 0.2%CVE-2026-92962LOWvm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.jsEPSS 0.2%