@rootio/vm2 vulnerabilities (Root)
94 vulnerabilities.
-
@rootio/vm2Root vm2 before 3.12.2 Host Process Termination via Construct Trap 8.9 High -
@rootio/vm2Root vm2 before 3.12.2 Authorization Bypass via Custom Resolver 9.5 Critical -
@rootio/vm2Root AIKIDO-2026-10847 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10846 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10845 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10844 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10843 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10842 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10841 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10840 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10839 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10808 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10731 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10730 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10729 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10727 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10726 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10725 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10724 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10723 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10721 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10720 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10719 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10718 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10717 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10716 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10689 in vm2 - Patched by Root No score -
@rootio/vm2Root AIKIDO-2026-10190 in vm2 - Patched by Root No score -
@rootio/vm2Root vm2 NodeVM before 3.12.1 Remote Code Execution via child_process 10.0 Critical -
@rootio/vm2Root vm2 before 3.11.8 allowAsync Bypass via Promise Thenable 7.1 High -
@rootio/vm2Root vm2 before 3.11.7 Denylist Bypass via fs/promises 8.4 High -
@rootio/vm2Root vm2 before 3.11.7 NodeVM Builtin Deny-List Bypass via node: Prefix 9.4 Critical -
@rootio/vm2Root vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming 10.0 Critical -
@rootio/vm2Root vm2 before 3.11.8 Sandbox Escape via NodeVM 10.0 Critical -
@rootio/vm2Root vm2 3.10.0 through 3.11.7 Denial of Service via Host Promise 9.2 Critical -
@rootio/vm2Root vm2 3.11.0 through 3.11.7 Prototype Pollution via TypedArray 9.3 Critical -
@rootio/vm2Root vm2 before 3.11.7 Module Allowlist Bypass via Custom Resolver 9.4 Critical -
@rootio/vm2Root vm2 before 3.11.7 Sandbox Escape via CLI require 9.3 Critical -
@rootio/vm2Root vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test 9.4 Critical -
@rootio/vm2Root vm2 before 3.11.7 Memory Disclosure via Buffer Pool 10.0 Critical -
@rootio/vm2Root vm2 before 3.11.7 Remote Code Execution via require.external 10.0 Critical -
@rootio/vm2Root vm2 3.10.2 through 3.11.6 Sandbox Escape via Promise Protector 9.3 Critical -
@rootio/vm2Root vm2 before 3.11.7 Timeout Bypass via FinalizationRegistry 8.7 High -
@rootio/vm2Root vm2 3.11.3 before 3.11.7 TLS Trust Store Manipulation 10.0 Critical -
@rootio/vm2Root vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent 10.0 Critical -
@rootio/vm2Root vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine 9.4 Critical -
@rootio/vm2Root vm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlite 9.4 Critical -
@rootio/vm2Root vm2 3.11.6 Remote Code Execution via Promise call/apply 10.0 Critical -
@rootio/vm2Root vm2 NodeVM Remote Code Execution via Array-Shaped Require 9.5 Critical -
@rootio/vm2Root vm2 before 3.11.8 Sandbox Escape RCE via AggregateError 9.5 Critical - Show olderLoading…