Vm2 Project vulnerabilities

Products

• Vm2 32

Newest

• patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2: Sandbox Breakout Using Async Generator CVE-2026-45411 Fix available 9.8 CriticalMay 13, 2026
• patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2: Sandbox Breakout Through Null Proto Exception CVE-2026-44009 Fix available 9.8 CriticalMay 8, 2026
• patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2 has sandbox breakout via `neutralizeArraySpeciesBatch` CVE-2026-44008 Fix available 9.8 CriticalMay 8, 2026
• patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution CVE-2026-44007 Fix available 9.1 CriticalMay 7, 2026
• patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2: NodeVM require.root bypass via symlink traversal allows sandbox escape CVE-2026-43998 Fix available 8.5 HighMay 7, 2026
• patriksimek vm2 vm2: Transformer Fast-Path Bypass Exposes Internal State Variable CVE-2026-44003 Fix available 5.3 MediumMay 7, 2026
• patriksimek vm2 vm2: Host File Path Disclosure via Stack Trace Information Leak CVE-2026-44002 Fix available 5.8 MediumMay 7, 2026
• patriksimek vm2 vm2: sandbox boundary bypass via host Promise resolution preserving host object identity CVE-2026-44000 Fix available 6.5 MediumMay 7, 2026
• patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2: Host Process OOM DoS via Buffer.alloc (Timeout Bypass) CVE-2026-44004 Fix available 7.5 HighMay 7, 2026
• patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2: Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS) CVE-2026-44001 Fix available 8.6 HighMay 7, 2026
• patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2: NodeVM builtin allowlist bypass via `module` builtin's `Module._load` allows sandbox escape CVE-2026-43999 Fix available 9.9 CriticalMay 7, 2026
• patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2: Sandbox escape CVE-2026-44005 Fix available 10.0 CriticalMay 7, 2026
• patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2: Sandbox Escape CVE-2026-43997 Fix available 10.0 CriticalMay 7, 2026
• patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2: Sandbox Escape CVE-2026-44006 Fix available 10.0 CriticalMay 7, 2026
• patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 more vm2: WASM Sandbox Escape (Node 25 only) CVE-2026-26956 Fix available 9.8 CriticalMay 4, 2026
• patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 more vm2: Sandbox Escape CVE-2026-26332 Fix available 9.8 CriticalMay 4, 2026
• patriksimek vm2, red hat developer hub, developer hub 1.10 +1 more +3 more vm2: Sandbox Breakout Through Inspect CVE-2026-24781 Fix available 9.8 CriticalMay 4, 2026
• patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 more vm2: Sandbox Breakout Through Promise Species CVE-2026-24120 Fix available 9.8 CriticalMay 4, 2026
• patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 more VM2 Sandbox Breakout Through __lookupGetter__ CVE-2026-24118 Public exploitFix available 9.8 CriticalMay 4, 2026
• patriksimek vm2 vm2 has a Sandbox Escape CVE-2026-22709 Fix available 9.8 CriticalJanuary 26, 2026
• patriksimek vm2 vm2 Sandbox Escape vulnerability CVE-2023-37466 Fix available 9.8 CriticalJuly 13, 2023
• patriksimek vm2 Sandbox Escape in vm2 CVE-2023-37903 Public exploitFix available 9.8 CriticalJuly 13, 2023
• patriksimek vm2 Sandbox Escape CVE-2023-32314 Public exploitFix available 9.8 CriticalMay 15, 2023
• patriksimek vm2 Inspect method manipulation in vm2 CVE-2023-32313 Fix available 5.3 MediumMay 15, 2023
• patriksimek vm2 Sandbox Escape in vm2 CVE-2023-30547 Public exploitFix available EPSS 73.0% 9.8 CriticalApril 17, 2023
• patriksimek vm2 vm2 Sandbox escape vulnerability CVE-2023-29199 Fix available 9.8 CriticalApril 12, 2023
• patriksimek vm2 vm2 Sandbox Escape vulnerability CVE-2023-29017 Public exploitFix available EPSS 63.2% 10.0 CriticalApril 6, 2023
• patriksimek vm2 Arbitrary Code Execution CVE-2022-25893 Fix available 9.8 CriticalDecember 21, 2022
• patriksimek vm2 vm2 vulnerable to Sandbox Escape before v3.9.11 CVE-2022-36067 Public exploitFix available EPSS 47.9% 10.0 CriticalSeptember 6, 2022
• patriksimek vm2 Sandbox Bypass CVE-2019-10761 Fix available 8.3 HighJuly 13, 2022
• patriksimek vm2 Sandbox Bypass CVE-2021-23555 Fix available 9.8 CriticalFebruary 11, 2022
• patriksimek vm2 Sandbox Bypass CVE-2021-23449 Fix available 9.8 CriticalOctober 18, 2021