Skip to contentPatriksimek Vm2 vulnerabilities
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: Sandbox Breakout Through Null Proto ExceptionCVE-2026-44009Fix available9.8 Critical
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2 has sandbox breakout via `neutralizeArraySpeciesBatch`CVE-2026-44008Fix available9.8 Critical
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command executionCVE-2026-44007Fix available9.1 Critical
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: NodeVM require.root bypass via symlink traversal allows sandbox escapeCVE-2026-43998Fix available8.5 High
- patriksimek vm2vm2: Transformer Fast-Path Bypass Exposes Internal State VariableCVE-2026-44003Fix available5.3 Medium
- patriksimek vm2vm2: Host File Path Disclosure via Stack Trace Information LeakCVE-2026-44002Fix available5.8 Medium
- patriksimek vm2vm2: sandbox boundary bypass via host Promise resolution preserving host object identityCVE-2026-44000Fix available6.5 Medium
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: Host Process OOM DoS via Buffer.alloc (Timeout Bypass)CVE-2026-44004Fix available7.5 High
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)CVE-2026-44001Fix available8.6 High
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: NodeVM builtin allowlist bypass via `module` builtin's `Module._load` allows sandbox escapeCVE-2026-43999Fix available9.9 Critical
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: Sandbox escapeCVE-2026-44005Fix available10.0 Critical
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: Sandbox EscapeCVE-2026-43997Fix available10.0 Critical
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: Sandbox EscapeCVE-2026-44006Fix available10.0 Critical
- patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 morevm2: WASM Sandbox Escape (Node 25 only)CVE-2026-26956Fix available9.8 Critical
- patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 morevm2: Sandbox EscapeCVE-2026-26332Fix available9.8 Critical
- patriksimek vm2, red hat developer hub, developer hub 1.10 +1 more +3 morevm2: Sandbox Breakout Through InspectCVE-2026-24781Fix available9.8 Critical
- patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 morevm2: Sandbox Breakout Through Promise SpeciesCVE-2026-24120Fix available9.8 Critical
- patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 moreVM2 Sandbox Breakout Through __lookupGetter__CVE-2026-24118Public exploitFix available9.8 Critical
- patriksimek vm2vm2 has a Sandbox EscapeCVE-2026-22709Fix available9.8 Critical
- patriksimek vm2vm2 Sandbox Escape vulnerabilityCVE-2023-37466Fix available9.8 Critical
- patriksimek vm2Sandbox Escape in vm2CVE-2023-37903Public exploitFix available9.8 Critical
- patriksimek vm2Sandbox EscapeCVE-2023-32314Public exploitFix available9.8 Critical
- patriksimek vm2Inspect method manipulation in vm2CVE-2023-32313Fix available5.3 Medium
- patriksimek vm2Sandbox Escape in vm2CVE-2023-30547Public exploitFix availableEPSS 73.0%9.8 Critical
- patriksimek vm2vm2 Sandbox escape vulnerabilityCVE-2023-29199Fix available9.8 Critical
- patriksimek vm2vm2 Sandbox Escape vulnerabilityCVE-2023-29017Public exploitFix availableEPSS 63.2%10.0 Critical
- patriksimek vm2Arbitrary Code ExecutionCVE-2022-25893Fix available9.8 Critical
- patriksimek vm2vm2 vulnerable to Sandbox Escape before v3.9.11CVE-2022-36067Public exploitFix availableEPSS 47.9%10.0 Critical
- patriksimek vm2Sandbox BypassCVE-2019-10761Fix available8.3 High
- patriksimek vm2Sandbox BypassCVE-2021-23555Fix available9.8 Critical
- patriksimek vm2Sandbox BypassCVE-2021-23449Fix available9.8 Critical