# vm2 (npm) vulnerabilities 78 known vulnerabilities (52 critical, 14 high, 10 medium, 2 low), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 3.12.2 (Sep 8, 2026): no advisory affects it - Newest unaffected release: 3.12.2 (Sep 8, 2026), the latest release - Weekly downloads: 1.3M - Dependents: 4,327 - Releases: 83 since 0.1.0 (Jan 14, 2014) - Registry: https://www.npmjs.com/package/vm2 - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-100723: 0.1.0 to 3.12.1 (3.12.2 is outside it) - CVE-2026-100722: 0.1.0 to 3.12.1 (3.12.2 is outside it) - CVE-2026-100721: 0.1.0 to 3.12.1 (3.12.2 is outside it) - CVE-2026-93605: 0.1.0 to 3.12.0 (3.12.1 is outside it) - CVE-2026-92963: 0.1.0 to 3.11.1 (3.11.2 is outside it) - CVE-2026-92962: 0.1.0 to 3.11.3 (3.11.4 is outside it) - CVE-2026-92961: 0.1.0 to 3.11.5 (3.11.6 is outside it) - CVE-2026-92960: 0.1.0 to 3.11.5 (3.11.6 is outside it) - CVE-2026-92959: 0.1.0 to 3.11.7 (3.11.8 is outside it) - CVE-2026-92958: 0.1.0 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92957: 0.1.0 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92956: 3.10.1 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92955: 0.1.0 to 3.11.7 (3.11.8 is outside it) - CVE-2026-92954: 3.10.0 to 3.11.7 (3.11.8 is outside it) - CVE-2026-92953: 3.11.0 to 3.11.7 (3.11.8 is outside it) - CVE-2026-92952: 3.11.4 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92951: 0.1.0 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92950: 0.1.0 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92949: 3.9.6 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92948: 3.9.6 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92947: 0.1.0 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92946: 0.1.0 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92945: 0.1.0 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92944: 3.10.2 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92942: 0.1.0 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92941: 3.11.3 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92940: 3.11.3 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92939: 3.11.3 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92938: 3.11.3 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92937: 3.11.6 (3.11.7 is outside it) - CVE-2026-92936: 3.11.0 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92935: 3.11.4 to 3.11.6 (3.11.7 is outside it) - CVE-2026-92934: 0.1.0 to 3.11.7 (3.11.8 is outside it) - CVE-2026-92933: 0.1.0 to 3.11.7 (3.11.8 is outside it) - CVE-2026-47683: 0.1.0 to 3.11.5 (3.11.6 is outside it) - CVE-2026-47686: 0.1.0 to 3.11.5 (3.11.6 is outside it) - CVE-2026-47698: 0.1.0 to 3.11.5 (3.11.6 is outside it) - CVE-2026-47141: 0.1.0 to 3.11.3 (3.11.4 is outside it) - CVE-2026-47210: 0.1.0 to 3.11.3 (3.11.4 is outside it) - CVE-2026-47208: 0.1.0 to 3.11.3 (3.11.4 is outside it) - CVE-2026-47140: 0.1.0 to 3.11.3 (3.11.4 is outside it) - CVE-2026-47139: 0.1.0 to 3.11.3 (3.11.4 is outside it) - CVE-2026-47137: 0.1.0 to 3.11.3 (3.11.4 is outside it) - CVE-2026-47135: 0.1.0 to 3.11.3 (3.11.4 is outside it) - CVE-2026-47131: 0.1.0 to 3.11.3 (3.11.4 is outside it) - CVE-2026-47209: 0.1.0 to 3.11.3 (3.11.4 is outside it) - CVE-2026-44005: 3.9.6 to 3.10.5 (3.11.0 is outside it) - CVE-2026-45411: 0.1.0 to 3.11.2 (3.11.3 is outside it) - CVE-2026-44009: 0.1.0 to 3.11.1 (3.11.2 is outside it) - CVE-2026-44008: 0.1.0 to 3.11.1 (3.11.2 is outside it) - CVE-2026-44007: 0.1.0 to 3.11.0 (3.11.1 is outside it) - CVE-2026-44006: 0.1.0 to 3.10.5 (3.11.0 is outside it) - CVE-2026-44004: 0.1.0 to 3.10.5 (3.11.0 is outside it) - CVE-2026-44003: 0.1.0 to 3.10.5 (3.11.0 is outside it) - CVE-2026-44002: 0.1.0 to 3.10.5 (3.11.0 is outside it) - CVE-2026-44001: 0.1.0 to 3.10.5 (3.11.0 is outside it) - CVE-2026-44000: 0.1.0 to 3.10.5 (3.11.0 is outside it) - CVE-2026-43999: 3.10.5 (3.11.0 is outside it) - CVE-2026-43998: 3.10.5 (3.11.0 is outside it) - CVE-2026-43997: 0.1.0 to 3.10.5 (3.11.0 is outside it) - CVE-2026-26956: 0.1.0 to 3.10.4 (3.10.5 is outside it) - CVE-2026-26332: 0.1.0 to 3.10.5 (3.11.0 is outside it) - CVE-2026-24781: 0.1.0 to 3.10.5 (3.11.0 is outside it) - CVE-2026-24120: 0.1.0 to 3.10.4 (3.10.5 is outside it) - CVE-2026-24118: 0.1.0 to 3.10.5 (3.11.0 is outside it) - CVE-2026-22709: 0.1.0 to 3.10.1 (3.10.2 is outside it) - CVE-2023-37903: 0.1.0 to 3.9.19 (3.10.0 is outside it) - CVE-2023-37466: 0.1.0 to 3.9.19 (3.10.0 is outside it) - CVE-2023-32314: 0.1.0 to 3.9.17 (3.9.18 is outside it) - CVE-2023-32313: 0.1.0 to 3.9.17 (3.9.18 is outside it) - CVE-2023-30547: 0.1.0 to 3.9.16 (3.9.17 is outside it) - CVE-2023-29199: 0.1.0 to 3.9.15 (3.9.16 is outside it) - CVE-2023-29017: 0.1.0 to 3.9.14 (3.9.15 is outside it) - CVE-2022-25893: 0.1.0 to 3.9.9 (3.9.10 is outside it) - CVE-2022-36067: 0.1.0 to 3.9.10 (3.9.11 is outside it) - CVE-2019-10761: 0.1.0 to 3.6.10 (3.6.11 is outside it) - CVE-2021-23555: 0.1.0 to 3.9.5 (3.9.6 is outside it) - CVE-2021-23449: 0.1.0 to 3.9.3 (3.9.4 is outside it) ## Advisories (78) ### [CVE-2026-100723](https://cve.now/CVE-2026-100723): vm2 before 3.12.2 Memory Disclosure via zlib Buffer Pool - Severity: Medium 6.9 - Published: Sep 27, 2026 - Affected: fixed in 3.12.2. - Fixed in 3.12.2 (released Sep 8, 2026, 19 days before disclosure). - The latest release, 3.12.2, is not affected. - 73% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-100722](https://cve.now/CVE-2026-100722): vm2 before 3.12.2 Host Process Termination via Construct Trap - Severity: High 8.9 - Published: Sep 27, 2026 - Affected: fixed in 3.12.2. - Fixed in 3.12.2 (released Sep 8, 2026, 19 days before disclosure). - The latest release, 3.12.2, is not affected. - 73% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-100721](https://cve.now/CVE-2026-100721): vm2 before 3.12.2 Authorization Bypass via Custom Resolver - Severity: Critical 9.5 - Published: Sep 27, 2026 - Affected: fixed in 3.12.2. - Fixed in 3.12.2 (released Sep 8, 2026, 19 days before disclosure). - The latest release, 3.12.2, is not affected. - 73% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-93605](https://cve.now/CVE-2026-93605): vm2 NodeVM before 3.12.1 Remote Code Execution via child\_process - Severity: Critical 10.0 - Published: Sep 18, 2026 - Affected: fixed in 3.12.1. - Fixed in 3.12.1 (released Sep 3, 2026, 15 days before disclosure). - The latest release, 3.12.2, is not affected. - 73% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92963](https://cve.now/CVE-2026-92963): vm2 before 3.11.2 Information Disclosure via Internal State - Severity: Medium 6.9 - Published: Sep 17, 2026 - Affected: fixed in 3.11.2. - Fixed in 3.11.2 (released May 3, 2026, 137 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (947.4K). ### [CVE-2026-92962](https://cve.now/CVE-2026-92962): vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js - Severity: Low 2.1 - Published: Sep 17, 2026 - Affected: fixed in 3.11.4. - Fixed in 3.11.4 (released May 18, 2026, 122 days before disclosure). - The latest release, 3.12.2, is not affected. - 61% of vm2 downloads last week were affected versions (966.3K). ### [CVE-2026-92961](https://cve.now/CVE-2026-92961): vm2 before 3.11.6 Memory Exhaustion DoS via bufferAllocLimit Bypass - Severity: High 8.7 - Published: Sep 17, 2026 - Affected: fixed in 3.11.6. - Fixed in 3.11.6 (released Aug 14, 2026, 34 days before disclosure). - The latest release, 3.12.2, is not affected. - 68% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92960](https://cve.now/CVE-2026-92960): vm2 before 3.11.6 Process-wide State Exposure via os and dns - Severity: Critical 10.0 - Published: Sep 17, 2026 - Affected: fixed in 3.11.6. - Fixed in 3.11.6 (released Aug 14, 2026, 34 days before disclosure). - The latest release, 3.12.2, is not affected. - 68% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92959](https://cve.now/CVE-2026-92959): vm2 before 3.11.8 allowAsync Bypass via Promise Thenable - Severity: High 7.1 - Published: Sep 17, 2026 - Affected: fixed in 3.11.8. - Fixed in 3.11.8 (released Aug 27, 2026, 21 days before disclosure). - The latest release, 3.12.2, is not affected. - 71% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92958](https://cve.now/CVE-2026-92958): vm2 before 3.11.7 Denylist Bypass via fs/promises - Severity: High 8.4 - Published: Sep 17, 2026 - Affected: fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 70% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92957](https://cve.now/CVE-2026-92957): vm2 before 3.11.7 NodeVM Builtin Deny-List Bypass via node: Prefix - Severity: Critical 9.4 - Published: Sep 17, 2026 - Affected: fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 70% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92956](https://cve.now/CVE-2026-92956): vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming - Severity: Critical 10.0 - Published: Sep 17, 2026 - Affected: from 3.10.1, fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 17% of vm2 downloads last week were affected versions (263.7K). ### [CVE-2026-92955](https://cve.now/CVE-2026-92955): vm2 before 3.11.8 Sandbox Escape via NodeVM - Severity: Critical 10.0 - Published: Sep 17, 2026 - Affected: fixed in 3.11.8. - Fixed in 3.11.8 (released Aug 27, 2026, 21 days before disclosure). - The latest release, 3.12.2, is not affected. - 71% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92954](https://cve.now/CVE-2026-92954): vm2 3.10.0 through 3.11.7 Denial of Service via Host Promise - Severity: Critical 9.2 - Published: Sep 17, 2026 - Affected: from 3.10.0, fixed in 3.11.8. - Fixed in 3.11.8 (released Aug 27, 2026, 21 days before disclosure). - The latest release, 3.12.2, is not affected. - 24% of vm2 downloads last week were affected versions (380.9K). ### [CVE-2026-92953](https://cve.now/CVE-2026-92953): vm2 3.11.0 through 3.11.7 Prototype Pollution via TypedArray - Severity: Critical 9.3 - Published: Sep 17, 2026 - Affected: from 3.11.0, fixed in 3.11.8. - Fixed in 3.11.8 (released Aug 27, 2026, 21 days before disclosure). - The latest release, 3.12.2, is not affected. - 11% of vm2 downloads last week were affected versions (173.2K). ### [CVE-2026-92952](https://cve.now/CVE-2026-92952): vm2 3.11.4 through 3.11.6 Sandbox Symbol Filtering Bypass - Severity: High 8.9 - Published: Sep 17, 2026 - Affected: from 3.11.4, fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 9% of vm2 downloads last week were affected versions (141.1K). ### [CVE-2026-92951](https://cve.now/CVE-2026-92951): vm2 before 3.11.7 Module Allowlist Bypass via Custom Resolver - Severity: Critical 9.4 - Published: Sep 17, 2026 - Affected: fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 70% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92950](https://cve.now/CVE-2026-92950): vm2 before 3.11.7 Sandbox Escape via CLI require - Severity: Critical 9.3 - Published: Sep 17, 2026 - Affected: fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 70% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92949](https://cve.now/CVE-2026-92949): vm2 3.9.6 before 3.11.7 Sandbox Bypass via Accessor Descriptor - Severity: Medium 6.3 - Published: Sep 17, 2026 - Affected: from 3.9.6, fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 66% of vm2 downloads last week were affected versions (1M). ### [CVE-2026-92948](https://cve.now/CVE-2026-92948): vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test - Severity: Critical 9.4 - Published: Sep 17, 2026 - Affected: from 3.9.6, fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 66% of vm2 downloads last week were affected versions (1M). ### [CVE-2026-92947](https://cve.now/CVE-2026-92947): vm2 before 3.11.7 Memory Disclosure via Buffer Pool - Severity: Critical 10.0 - Published: Sep 17, 2026 - Affected: fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 70% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92946](https://cve.now/CVE-2026-92946): vm2 before 3.11.7 Remote Code Execution via require.external - Severity: Critical 10.0 - Published: Sep 17, 2026 - Affected: fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 70% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92945](https://cve.now/CVE-2026-92945): vm2 before 3.11.7 Module Allowlist Bypass via Prefix Matching - Severity: Low 2.3 - Published: Sep 17, 2026 - Affected: fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 70% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92944](https://cve.now/CVE-2026-92944): vm2 3.10.2 through 3.11.6 Sandbox Escape via Promise Protector - Severity: Critical 9.3 - Published: Sep 17, 2026 - Affected: from 3.10.2, fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 16% of vm2 downloads last week were affected versions (259.4K). ### [CVE-2026-92942](https://cve.now/CVE-2026-92942): vm2 before 3.11.7 Timeout Bypass via FinalizationRegistry - Severity: High 8.7 - Published: Sep 17, 2026 - Affected: fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 70% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92941](https://cve.now/CVE-2026-92941): vm2 3.11.3 before 3.11.7 TLS Trust Store Manipulation - Severity: Critical 10.0 - Published: Sep 17, 2026 - Affected: from 3.11.3, fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 9.7% of vm2 downloads last week were affected versions (152.8K). ### [CVE-2026-92940](https://cve.now/CVE-2026-92940): vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent - Severity: Critical 10.0 - Published: Sep 17, 2026 - Affected: from 3.11.3, fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 9.7% of vm2 downloads last week were affected versions (152.8K). ### [CVE-2026-92939](https://cve.now/CVE-2026-92939): vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine - Severity: Critical 9.4 - Published: Sep 17, 2026 - Affected: from 3.11.3, fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 9.7% of vm2 downloads last week were affected versions (152.8K). ### [CVE-2026-92938](https://cve.now/CVE-2026-92938): vm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlite - Severity: Critical 9.4 - Published: Sep 17, 2026 - Affected: from 3.11.3, fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 9.7% of vm2 downloads last week were affected versions (152.8K). ### [CVE-2026-92937](https://cve.now/CVE-2026-92937): vm2 3.11.6 Remote Code Execution via Promise call/apply - Severity: Critical 10.0 - Published: Sep 17, 2026 - Affected: from 3.11.6, fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 2.4% of vm2 downloads last week were affected versions (38.4K). ### [CVE-2026-92936](https://cve.now/CVE-2026-92936): vm2 3.11.0 before 3.11.7 Information Disclosure via Error Stack - Severity: Medium 6.9 - Published: Sep 17, 2026 - Affected: from 3.11.0, fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 10% of vm2 downloads last week were affected versions (160.7K). ### [CVE-2026-92935](https://cve.now/CVE-2026-92935): vm2 NodeVM Remote Code Execution via Array-Shaped Require - Severity: Critical 9.5 - Published: Sep 17, 2026 - Affected: from 3.11.4, fixed in 3.11.7. - Fixed in 3.11.7 (released Aug 24, 2026, 24 days before disclosure). - The latest release, 3.12.2, is not affected. - 9% of vm2 downloads last week were affected versions (141.1K). ### [CVE-2026-92934](https://cve.now/CVE-2026-92934): vm2 before 3.11.8 Sandbox Escape RCE via AggregateError - Severity: Critical 9.5 - Published: Sep 17, 2026 - Affected: fixed in 3.11.8. - Fixed in 3.11.8 (released Aug 27, 2026, 21 days before disclosure). - The latest release, 3.12.2, is not affected. - 71% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-92933](https://cve.now/CVE-2026-92933): vm2 before 3.11.8 Information Disclosure via util.getCallSites - Severity: Medium 6.9 - Published: Sep 17, 2026 - Affected: fixed in 3.11.8. - Fixed in 3.11.8 (released Aug 27, 2026, 21 days before disclosure). - The latest release, 3.12.2, is not affected. - 71% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-47683](https://cve.now/CVE-2026-47683): vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike - Severity: High 8.7 - Published: Aug 17, 2026 - Affected: fixed in 3.11.6. - Fixed in 3.11.6 (released Aug 14, 2026, 3 days before disclosure). - The latest release, 3.12.2, is not affected. - 68% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-47686](https://cve.now/CVE-2026-47686): vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCE - Severity: Critical 9.9 - Published: Aug 17, 2026 - Affected: fixed in 3.11.6. - Fixed in 3.11.6 (released Aug 14, 2026, 3 days before disclosure). - The latest release, 3.12.2, is not affected. - 68% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-47698](https://cve.now/CVE-2026-47698): vm2: Sandbox Breakout Using Dangerous Host Proto Mutators - Severity: Critical 9.8 - Published: Aug 17, 2026 - Affected: fixed in 3.11.6. - Fixed in 3.11.6 (released Aug 14, 2026, 3 days before disclosure). - The latest release, 3.12.2, is not affected. - 68% of vm2 downloads last week were affected versions (1.1M). ### [CVE-2026-47141](https://cve.now/CVE-2026-47141): vm2: NodeVM observability builtins leak host process and HTTP request data - Severity: Medium 6.9 - Published: Jun 12, 2026 - Affected: fixed in 3.11.4. - Fixed in 3.11.4 (released May 18, 2026, 25 days before disclosure). - The latest release, 3.12.2, is not affected. - 61% of vm2 downloads last week were affected versions (966.3K). ### [CVE-2026-47210](https://cve.now/CVE-2026-47210): vm2 sandbox escape via JSPI-backed Promise \`.finally()\` species bypass - Severity: Critical 9.8 - Published: Jun 12, 2026 - Affected: fixed in 3.11.4. - Fixed in 3.11.4 (released May 18, 2026, 25 days before disclosure). - The latest release, 3.12.2, is not affected. - 61% of vm2 downloads last week were affected versions (966.3K). ### [CVE-2026-47208](https://cve.now/CVE-2026-47208): vm2: Sandbox Breakout Using Promise Species - Severity: Critical 10.0 - Published: Jun 12, 2026 - Affected: fixed in 3.11.4. - Fixed in 3.11.4 (released May 18, 2026, 25 days before disclosure). - The latest release, 3.12.2, is not affected. - 61% of vm2 downloads last week were affected versions (966.3K). ### [CVE-2026-47140](https://cve.now/CVE-2026-47140): vm2: NodeVM builtin denylist bypass via process and inspector/promises allows host code execution - Severity: Critical 10.0 - Published: Jun 12, 2026 - Affected: fixed in 3.11.4. - Fixed in 3.11.4 (released May 18, 2026, 25 days before disclosure). - The latest release, 3.12.2, is not affected. - 61% of vm2 downloads last week were affected versions (966.3K). ### [CVE-2026-47139](https://cve.now/CVE-2026-47139): vm2: NodeVM network builtin exclusions bypass via internal \_http\_client and \_http\_server - Severity: High 8.6 - Published: Jun 12, 2026 - Affected: fixed in 3.11.4. - Fixed in 3.11.4 (released May 18, 2026, 25 days before disclosure). - The latest release, 3.12.2, is not affected. - 61% of vm2 downloads last week were affected versions (966.3K). ### [CVE-2026-47137](https://cve.now/CVE-2026-47137): vm2: GHSA-8hg8-63c5-gwmx patch bypass: nesting:true without explicit require still allows full RCE - Severity: Critical 10.0 - Published: Jun 12, 2026 - Affected: fixed in 3.11.4. - Fixed in 3.11.4 (released May 18, 2026, 25 days before disclosure). - The latest release, 3.12.2, is not affected. - 61% of vm2 downloads last week were affected versions (966.3K). ### [CVE-2026-47135](https://cve.now/CVE-2026-47135): vm2: Sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks - Severity: High 8.7 - Published: Jun 12, 2026 - Affected: fixed in 3.11.4. - Fixed in 3.11.4 (released May 18, 2026, 25 days before disclosure). - The latest release, 3.12.2, is not affected. - 61% of vm2 downloads last week were affected versions (966.3K). ### [CVE-2026-47131](https://cve.now/CVE-2026-47131): vm2: Sandbox Escape - Severity: Critical 10.0 - Published: Jun 12, 2026 - Affected: fixed in 3.11.4. - Fixed in 3.11.4 (released May 18, 2026, 25 days before disclosure). - The latest release, 3.12.2, is not affected. - 61% of vm2 downloads last week were affected versions (966.3K). ### [CVE-2026-47209](https://cve.now/CVE-2026-47209): vm2: Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain - Severity: High 8.6 - Published: Jun 12, 2026 - Affected: fixed in 3.11.4. - Fixed in 3.11.4 (released May 18, 2026, 25 days before disclosure). - The latest release, 3.12.2, is not affected. - 61% of vm2 downloads last week were affected versions (966.3K). ### [CVE-2026-44005](https://cve.now/CVE-2026-44005): vm2: Sandbox escape - Severity: Critical 10.0 - Published: May 13, 2026 - Affected: from 3.9.6, fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 12 days before disclosure). - The latest release, 3.12.2, is not affected. - 56% of vm2 downloads last week were affected versions (878K). ### [CVE-2026-45411](https://cve.now/CVE-2026-45411): vm2: Sandbox Breakout Using Async Generator - Severity: Critical 9.8 - Published: May 13, 2026 - Affected: fixed in 3.11.3. - Fixed in 3.11.3 (released May 11, 2026, 2 days before disclosure). - The latest release, 3.12.2, is not affected. - 61% of vm2 downloads last week were affected versions (954.6K). ### [CVE-2026-44009](https://cve.now/CVE-2026-44009): vm2: Sandbox Breakout Through Null Proto Exception - Severity: Critical 9.8 - Published: May 13, 2026 - Affected: fixed in 3.11.2. - Fixed in 3.11.2 (released May 3, 2026, 10 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (947.4K). ### [CVE-2026-44008](https://cve.now/CVE-2026-44008): vm2 has sandbox breakout via \`neutralizeArraySpeciesBatch\` - Severity: Critical 9.8 - Published: May 13, 2026 - Affected: fixed in 3.11.2. - Fixed in 3.11.2 (released May 3, 2026, 10 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (947.4K). ### [CVE-2026-44007](https://cve.now/CVE-2026-44007): vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution - Severity: Critical 9.1 - Published: May 13, 2026 - Affected: fixed in 3.11.1. - Fixed in 3.11.1 (released May 1, 2026, 12 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (947.1K). ### [CVE-2026-44006](https://cve.now/CVE-2026-44006): vm2: Sandbox Escape - Severity: Critical 10.0 - Published: May 13, 2026 - Affected: fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 12 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (946.7K). ### [CVE-2026-44004](https://cve.now/CVE-2026-44004): vm2: Host Process OOM DoS via Buffer.alloc (Timeout Bypass) - Severity: High 7.5 - Published: May 13, 2026 - Affected: fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 12 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (946.7K). ### [CVE-2026-44003](https://cve.now/CVE-2026-44003): vm2: Transformer Fast-Path Bypass Exposes Internal State Variable - Severity: Medium 5.3 - Published: May 13, 2026 - Affected: fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 12 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (946.7K). ### [CVE-2026-44002](https://cve.now/CVE-2026-44002): vm2: Host File Path Disclosure via Stack Trace Information Leak - Severity: Medium 5.8 - Published: May 13, 2026 - Affected: fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 12 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (946.7K). ### [CVE-2026-44001](https://cve.now/CVE-2026-44001): vm2: Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS) - Severity: High 8.6 - Published: May 13, 2026 - Affected: fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 12 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (946.7K). ### [CVE-2026-44000](https://cve.now/CVE-2026-44000): vm2: sandbox boundary bypass via host Promise resolution preserving host object identity - Severity: Medium 6.5 - Published: May 13, 2026 - Affected: fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 12 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (946.7K). ### [CVE-2026-43999](https://cve.now/CVE-2026-43999): vm2: NodeVM builtin allowlist bypass via \`module\` builtin's \`Module.\_load\` allows sandbox escape - Severity: Critical 9.9 - Published: May 13, 2026 - Affected: from 3.10.5, fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 12 days before disclosure). - The latest release, 3.12.2, is not affected. - 3.9% of vm2 downloads last week were affected versions (61.8K). ### [CVE-2026-43998](https://cve.now/CVE-2026-43998): vm2: NodeVM require.root bypass via symlink traversal allows sandbox escape - Severity: High 8.5 - Published: May 13, 2026 - Affected: from 3.10.5, fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 12 days before disclosure). - The latest release, 3.12.2, is not affected. - 3.9% of vm2 downloads last week were affected versions (61.8K). ### [CVE-2026-43997](https://cve.now/CVE-2026-43997): vm2: Sandbox Escape - Severity: Critical 10.0 - Published: May 13, 2026 - Affected: fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 12 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (946.7K). ### [CVE-2026-26956](https://cve.now/CVE-2026-26956): vm2: WASM Sandbox Escape (Node 25 only) - Severity: Critical 9.8 - Published: May 4, 2026 - Affected: fixed in 3.10.5. - Fixed in 3.10.5 (released Feb 17, 2026, 76 days before disclosure). - The latest release, 3.12.2, is not affected. - 56% of vm2 downloads last week were affected versions (884.9K). ### [CVE-2026-26332](https://cve.now/CVE-2026-26332): vm2: Sandbox Escape - Severity: Critical 9.8 - Published: May 4, 2026 - Affected: fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 3 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (946.7K). ### [CVE-2026-24781](https://cve.now/CVE-2026-24781): vm2: Sandbox Breakout Through Inspect - Severity: Critical 9.8 - Published: May 4, 2026 - Affected: fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 3 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (946.7K). ### [CVE-2026-24120](https://cve.now/CVE-2026-24120): vm2: Sandbox Breakout Through Promise Species - Severity: Critical 9.8 - Published: May 4, 2026 - Affected: fixed in 3.10.5. - Fixed in 3.10.5 (released Feb 17, 2026, 76 days before disclosure). - The latest release, 3.12.2, is not affected. - 56% of vm2 downloads last week were affected versions (884.9K). ### [CVE-2026-24118](https://cve.now/CVE-2026-24118): VM2 Sandbox Breakout Through lookupGetter - Severity: Critical 9.8 - Published: May 4, 2026 - Affected: fixed in 3.11.0. - Fixed in 3.11.0 (released May 1, 2026, 3 days before disclosure). - The latest release, 3.12.2, is not affected. - 60% of vm2 downloads last week were affected versions (946.7K). ### [CVE-2026-22709](https://cve.now/CVE-2026-22709): vm2 has a Sandbox Escape - Severity: Critical 9.8 - Published: Jan 26, 2026 - Affected: fixed in 3.10.2. - Fixed in 3.10.2 (released Jan 17, 2026, 9 days before disclosure). - The latest release, 3.12.2, is not affected. - 54% of vm2 downloads last week were affected versions (848K). ### [CVE-2023-37903](https://cve.now/CVE-2023-37903): Sandbox Escape in vm2 - Severity: Critical 9.8 - Published: Jul 21, 2023 - Affected: through 3.9.19. - Fixed in 3.10.0 (released Oct 24, 2025, 826 days after disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 3.12.2, is not affected. - 47% of vm2 downloads last week were affected versions (739K). ### [CVE-2023-37466](https://cve.now/CVE-2023-37466): vm2 Sandbox Escape vulnerability - Severity: Critical 9.8 - Published: Jul 13, 2023 - Affected: fixed in 3.10.0. - Fixed in 3.10.0 (released Oct 24, 2025, 834 days after disclosure). - The latest release, 3.12.2, is not affected. - 47% of vm2 downloads last week were affected versions (739K). ### [CVE-2023-32314](https://cve.now/CVE-2023-32314): Sandbox Escape - Severity: Critical 9.8 - Published: May 15, 2023 - Affected: fixed in 3.9.18. - Fixed in 3.9.18 (released May 15, 2023, the day of disclosure). - The latest release, 3.12.2, is not affected. - 19% of vm2 downloads last week were affected versions (302.5K). ### [CVE-2023-32313](https://cve.now/CVE-2023-32313): Inspect method manipulation in vm2 - Severity: Medium 5.3 - Published: May 15, 2023 - Affected: fixed in 3.9.18. - Fixed in 3.9.18 (released May 15, 2023, the day of disclosure). - The latest release, 3.12.2, is not affected. - 19% of vm2 downloads last week were affected versions (302.5K). ### [CVE-2023-30547](https://cve.now/CVE-2023-30547): Sandbox Escape in vm2 - Severity: Critical 9.8 - Published: Apr 17, 2023 - Affected: fixed in 3.9.17. - Fixed in 3.9.17 (released Apr 17, 2023, the day of disclosure). - The latest release, 3.12.2, is not affected. - 17% of vm2 downloads last week were affected versions (268.7K). ### [CVE-2023-29199](https://cve.now/CVE-2023-29199): vm2 Sandbox escape vulnerability - Severity: Critical 9.8 - Published: Apr 14, 2023 - Affected: fixed in 3.9.16. - Fixed in 3.9.16 (released Apr 11, 2023, 3 days before disclosure). - The latest release, 3.12.2, is not affected. - 17% of vm2 downloads last week were affected versions (264.2K). ### [CVE-2023-29017](https://cve.now/CVE-2023-29017): vm2 Sandbox Escape vulnerability - Severity: Critical 10.0 - Published: Apr 6, 2023 - Affected: fixed in 3.9.15. - Fixed in 3.9.15 (released Apr 6, 2023, the day of disclosure). - The latest release, 3.12.2, is not affected. - 17% of vm2 downloads last week were affected versions (262.5K). ### [CVE-2022-25893](https://cve.now/CVE-2022-25893): Arbitrary Code Execution - Severity: Critical 9.8 - Published: Dec 21, 2022 - Affected: fixed in 3.9.10. - Fixed in 3.9.10 (released Jul 5, 2022, 169 days before disclosure). - The latest release, 3.12.2, is not affected. - 7.6% of vm2 downloads last week were affected versions (119.2K). ### [CVE-2022-36067](https://cve.now/CVE-2022-36067): vm2 vulnerable to Sandbox Escape before v3.9.11 - Severity: Critical 10.0 - Published: Sep 6, 2022 - Affected: fixed in 3.9.11. - Fixed in 3.9.11 (released Aug 28, 2022, 9 days before disclosure). - The latest release, 3.12.2, is not affected. - 8.6% of vm2 downloads last week were affected versions (134.5K). ### [CVE-2019-10761](https://cve.now/CVE-2019-10761): Sandbox Bypass - Severity: High 8.3 - Published: Jul 13, 2022 - Affected: fixed in 3.6.11. - Fixed in 3.6.11 (released Apr 7, 2019, 1193 days before disclosure). - The latest release, 3.12.2, is not affected. - 0.4% of vm2 downloads last week were affected versions (6.9K). ### [CVE-2021-23555](https://cve.now/CVE-2021-23555): Sandbox Bypass - Severity: Critical 9.8 - Published: Feb 11, 2022 - Affected: fixed in 3.9.6. - Fixed in 3.9.6 (released Feb 8, 2022, 3 days before disclosure). - The latest release, 3.12.2, is not affected. - 4.4% of vm2 downloads last week were affected versions (68.7K). ### [CVE-2021-23449](https://cve.now/CVE-2021-23449): Sandbox Bypass - Severity: Critical 9.8 - Published: Oct 18, 2021 - Affected: fixed in 3.9.4. - Fixed in 3.9.4 (released Oct 12, 2021, 6 days before disclosure). - The latest release, 3.12.2, is not affected. - 3% of vm2 downloads last week were affected versions (47.5K). --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/npm/vm2 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.