Patriksimek vulnerabilities
77 CVEs and advisories name Patriksimek as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-100723vm2 before 3.12.2 Memory Disclosure via zlib Buffer Pool
- CVE-2026-100722vm2 before 3.12.2 Host Process Termination via Construct Trap
- CVE-2026-100721vm2 before 3.12.2 Authorization Bypass via Custom Resolver
- CVE-2026-93606vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species
- CVE-2026-93605vm2 NodeVM before 3.12.1 Remote Code Execution via child_process
- CVE-2026-93604vm2 3.11.8 Sandbox Escape via crypto.setFips
- CVE-2026-93603vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Function
- CVE-2026-92963vm2 before 3.11.2 Information Disclosure via Internal State
- CVE-2026-92962vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js
- CVE-2026-92961vm2 before 3.11.6 Memory Exhaustion DoS via bufferAllocLimit Bypass
- CVE-2026-92960vm2 before 3.11.6 Process-wide State Exposure via os and dns
- CVE-2026-92959vm2 before 3.11.8 allowAsync Bypass via Promise Thenable
- CVE-2026-92958vm2 before 3.11.7 Denylist Bypass via fs/promises
- CVE-2026-92957vm2 before 3.11.7 NodeVM Builtin Deny-List Bypass via node: Prefix
- CVE-2026-92956vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming
- CVE-2026-92955vm2 before 3.11.8 Sandbox Escape via NodeVM
- CVE-2026-92954vm2 3.10.0 through 3.11.7 Denial of Service via Host Promise
- CVE-2026-92953vm2 3.11.0 through 3.11.7 Prototype Pollution via TypedArray
- CVE-2026-92952vm2 3.11.4 through 3.11.6 Sandbox Symbol Filtering Bypass
- CVE-2026-92951vm2 before 3.11.7 Module Allowlist Bypass via Custom Resolver
- CVE-2026-92950vm2 before 3.11.7 Sandbox Escape via CLI require
- CVE-2026-92949vm2 3.9.6 before 3.11.7 Sandbox Bypass via Accessor Descriptor
- CVE-2026-92948vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test
- CVE-2026-92947vm2 before 3.11.7 Memory Disclosure via Buffer Pool
- CVE-2026-92946vm2 before 3.11.7 Remote Code Execution via require.external
- CVE-2026-92945vm2 before 3.11.7 Module Allowlist Bypass via Prefix Matching
- CVE-2026-92944vm2 3.10.2 through 3.11.6 Sandbox Escape via Promise Protector
- CVE-2026-92942vm2 before 3.11.7 Timeout Bypass via FinalizationRegistry
- CVE-2026-92941vm2 3.11.3 before 3.11.7 TLS Trust Store Manipulation
- CVE-2026-92940vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent