| vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)CVE-2026-92960 · GHSA-M5W8-4GQ2-6F8X |
vm2 |
npm |
Critical
|
Fix reported |
|
| vm2's Transformer Fast-Path Bypass Exposes Internal State VariableCVE-2026-44003 · GHSA-WP5R-2GW5-M7Q7 |
vm2 |
npm |
Medium
|
Fix reported |
|
| vm2 has access to `VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL`CVE-2026-92963 · GHSA-2CM2-M3W5-GP2F |
vm2 |
npm |
Medium
|
Fix reported |
|
| vm2 has Sandbox Breakout Through Null Proto ExceptionCVE-2026-44009 · GHSA-9VG3-4RFJ-WGCM |
vm2 |
npm |
Critical
|
Fix reported |
|
| vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`CVE-2026-44008 · GHSA-9QJ6-QJGG-37QQ |
vm2 |
npm |
Critical
|
Fix reported |
|
| vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command executionCVE-2026-44007 · GHSA-8HG8-63C5-GWMX |
vm2 |
npm |
Critical
|
Fix reported |
|
| VM2 Has a Sandbox Escape Issue via SuppressedErrorCVE-2026-26332 · GHSA-55HX-C926-FR95 |
vm2Self-service automation portal 2/ansible-automation-platform/automation-portal |
npmRed Hat |
Critical
|
Fix reported |
|
| VM2 Has Sandbox Breakout Through Inspect FunctionCVE-2026-24781 · GHSA-V37H-5MFM-C47C |
vm2Red Hat Developer Hub 1/rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor |
npmRed Hat |
Critical
|
Fix reported |
|
| VM2 Sandbox Breakout Through __lookupGetter__CVE-2026-24118 · GHSA-GRJ5-JJM8-H35P |
vm2Self-service automation portal 2/ansible-automation-platform/automation-portal |
npmRed Hat |
Critical
|
Fix reported |
|
| vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host PackageCVE-2026-92951 · GHSA-C48M-32M9-VX93 |
vm2 |
npm |
Critical
|
Fix reported |
|
| vm2 contains a sandbox escape vulnerabilityCVE-2026-93605 · GHSA-PQ68-RVW4-XP4R |
vm2 |
npm |
Critical
|
Fix reported |
|
| vm2: NodeVM custom resolution bypasses external path boundariesCVE-2026-100721 · GHSA-5H3F-Q97H-CCVC |
vm2 |
npm |
Critical
|
Fix reported |
|
| vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host processCVE-2026-100722 · GHSA-2V2P-6J97-CJG9 |
vm2Red Hat Developer Hub 1/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend |
npmRed Hat |
High
|
Fix reported |
|
| vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundaryCVE-2026-100723 · GHSA-489W-W794-JQ94 |
vm2 |
npm |
Medium
|
Fix reported |
|
| vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fixCVE-2026-92953 · GHSA-3VGF-8M4Q-Q4QR |
vm2 |
npm |
Critical
|
Fix reported |
|
| vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host processCVE-2026-92954 · GHSA-GJQ8-XM47-88RC |
vm2 |
npm |
Critical
|
Fix reported |
|
| vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVMCVE-2026-92959 · GHSA-F8GF-W286-FMQ2 |
vm2 |
npm |
High
|
Fix reported |
|
| vm2: Sandbox Escape (NodeVM)CVE-2026-92955 · GHSA-88HF-G992-JG85 |
vm2 |
npm |
Critical
|
Fix reported |
|
| vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuitCVE-2026-92934 · GHSA-X965-FC75-JPQH |
vm2 |
npm |
Critical
|
Fix reported |
|
| vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stackCVE-2026-92933 · GHSA-R273-HXVJ-FXHP |
vm2Red Hat Developer Hub 1/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend |
npmRed Hat |
Medium
|
Fix reported |
|
