{"id":"AIKIDO-2026-10190","aliases":["ROOT-APP-NPM-AIKIDO-2026-10190"],"status":"published","title":"AIKIDO-2026-10190 in vm2 - Patched by Root","description":"Root has patched AIKIDO-2026-10190 in the vm2 package for Root:npm. Multiple fixed versions available.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-09-22T09:02:20Z","modified":"2026-09-22T10:15:06Z","fixes":[{"ecosystem":"Root:npm","package":"vm2","fixed_in":["3.9.17-aikido.11","3.9.17-aikido.12","3.9.17-aikido.13","3.9.17-aikido.6","3.9.17-aikido.7","3.9.17-aikido.8","3.9.17-aikido.9","3.9.17-aikido.10"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/vm2","fixed_in":["3.9.17-root.io.11","3.9.17-root.io.12","3.9.17-root.io.13","3.9.17-root.io.6","3.9.17-root.io.7","3.9.17-root.io.8","3.9.17-root.io.9","3.9.17-root.io.10"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Root:npm","package":"vm2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.17-aikido.11"},{"fixed":"3.9.17-aikido.12"},{"fixed":"3.9.17-aikido.13"},{"fixed":"3.9.17-aikido.6"},{"fixed":"3.9.17-aikido.7"},{"fixed":"3.9.17-aikido.8"},{"fixed":"3.9.17-aikido.9"},{"fixed":"3.9.17-aikido.10"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/vm2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.17-root.io.11"},{"fixed":"3.9.17-root.io.12"},{"fixed":"3.9.17-root.io.13"},{"fixed":"3.9.17-root.io.6"},{"fixed":"3.9.17-root.io.7"},{"fixed":"3.9.17-root.io.8"},{"fixed":"3.9.17-root.io.9"},{"fixed":"3.9.17-root.io.10"}]}]}],"sources":{"osv":[{"id":"ROOT-APP-NPM-AIKIDO-2026-10190","title":"AIKIDO-2026-10190 in vm2 - Patched by Root","description":"Root has patched AIKIDO-2026-10190 in the vm2 package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-09-22T09:02:20Z","modified":"2026-09-22T10:15:06.267612502Z","updated_at":"2026-11-02T15:53:27.362922Z"}]}}