vm2 project kayıtları

vm2 project üreticisine ait 32 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 22
Düzeltme kaydı olan: %96,9
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

32 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
62Bu hafta	CVE-2023-30547Kavram kanıtı	Sandbox Escape in vm2vm2 project · vm2 · CWE-74 pre-auth RCE	Kritik10,0	—	%72,1	17 Nis 2023
58Planlayın	CVE-2023-29017Kavram kanıtı	vm2 Sandbox Escape vulnerabilityvm2 project · vm2 · CWE-913 pre-auth RCE	Kritik9,8	—	%63,2	6 Nis 2023
54Planlayın	CVE-2022-36067Kavram kanıtı	vm2 vulnerable to Sandbox Escape before v3.9.11vm2 project · vm2 · CWE-913 pre-auth RCE	Kritik10,0	—	%47,9	6 Eyl 2022
42Planlayın	CVE-2023-32314Kavram kanıtı	vm2 is a sandbox that can run untrusted code with Node's built-in modules.vm2 project · vm2 · CWE-74 pre-auth RCE	Kritik10,0	—	%8,1	15 May 2023
41Planlayın	CVE-2023-37903Kavram kanıtı	Sandbox Escape in vm2vm2 project · vm2 · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik10,0	—	%4,2	21 Tem 2023
41Planlayın	CVE-2023-37466İstismar yok	vm2 Sandbox Escape vulnerabilityvm2 project · vm2 · CWE-94 pre-auth RCE	Kritik10,0	—	%3,9	13 Tem 2023
41Planlayın	CVE-2023-29199İstismar yok	vm2 Sandbox escape vulnerabilityvm2 project · vm2 · CWE-913 pre-auth RCE	Kritik10,0	—	%3,9	14 Nis 2023
41Planlayın	CVE-2021-23449İstismar yok	This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of arbitrary code on the hostvm2 project · vm2 · CWE-1321 pre-auth RCE Prototype pollution	Kritik10,0	—	%3,6	18 Eki 2021
40Planlayın	CVE-2021-23555İstismar yok	The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during genvm2 project · vm2 pre-auth RCE	Kritik9,8	—	%2,9	11 Şub 2022
40Planlayın	CVE-2026-22709İstismar yok	vm2 has a Sandbox Escapevm2 project · vm2 · CWE-94 pre-auth RCE	Kritik10,0	—	%1,3	26 Oca 2026
40Planlayın	CVE-2026-44005İstismar yok	vm2 is an open source vm/sandbox for Node.js.vm2 project · vm2 · CWE-94 pre-auth RCE	Kritik10,0	—	%0,8	13 May 2026
40Planlayın	CVE-2026-43997İstismar yok	vm2 is an open source vm/sandbox for Node.js.vm2 project · vm2 · CWE-94 pre-auth RCE	Kritik10,0	—	%0,8	13 May 2026
40Planlayın	CVE-2026-44006İstismar yok	vm2 is an open source vm/sandbox for Node.js.vm2 project · vm2 · CWE-94 pre-auth RCE	Kritik10,0	—	%0,8	13 May 2026
40Planlayın	CVE-2026-26332İstismar yok	vm2 is an open source vm/sandbox for Node.js.vm2 project · vm2 · CWE-94 pre-auth RCE	Kritik10,0	—	%0,7	4 May 2026
39İzleyin	CVE-2022-25893İstismar yok	Arbitrary Code Executionvm2 project · vm2 · CWE-471 pre-auth RCE	Kritik9,8	—	%1,4	21 Ara 2022
39İzleyin	CVE-2026-24781İstismar yok	vm2: Sandbox Breakout Through Inspectvm2 project · vm2 · CWE-94 pre-auth RCE	Kritik9,8	—	%1,2	4 May 2026
39İzleyin	CVE-2026-43999İstismar yok	vm2: NodeVM builtin allowlist bypass via `module` builtin's `Module._load` allows sandbox escapevm2 project · vm2 · CWE-863 RCE Erişim denetimi (IDOR)	Kritik9,9	—	%1,0	13 May 2026
39İzleyin	CVE-2026-24118Kavram kanıtı	VM2 Sandbox Breakout Through __lookupGetter__vm2 project · vm2 · CWE-94 pre-auth RCE	Kritik9,8	—	%0,9	4 May 2026
39İzleyin	CVE-2026-45411İstismar yok	vm2: Sandbox Breakout Using Async Generatorvm2 project · vm2 · CWE-668 pre-auth RCE	Kritik9,8	—	%0,9	13 May 2026
39İzleyin	CVE-2026-44008İstismar yok	vm2: Snabox breakout via `neutralizeArraySpeciesBatch`vm2 project · vm2 · CWE-668 pre-auth RCE	Kritik9,8	—	%0,9	13 May 2026
39İzleyin	CVE-2026-24120İstismar yok	vm2: Sandbox Breakout Through Promise Speciesvm2 project · vm2 · CWE-94 pre-auth RCE	Kritik9,8	—	%0,9	4 May 2026
39İzleyin	CVE-2026-26956İstismar yok	vm2: WASM Sandbox Escape (Node 25 only)vm2 project · vm2 · CWE-693 pre-auth RCE	Kritik9,8	—	%0,8	4 May 2026
39İzleyin	CVE-2026-44009İstismar yok	vm2: Sandbox Breakout Through Null Proto Exceptionvm2 project · vm2 · CWE-668 Kimlik doğrulamasız	Kritik9,8	—	%0,7	13 May 2026
36İzleyin	CVE-2026-44007İstismar yok	vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command executionvm2 project · vm2 · CWE-284 RCE Erişim denetimi (IDOR)	Kritik9,1	—	%0,6	13 May 2026
34İzleyin	CVE-2026-43998İstismar yok	vm2: NodeVM require.root bypass via symlink traversal allows sandbox escapevm2 project · vm2 · CWE-59 RCE	Yüksek8,5	—	%0,9	13 May 2026

CVE-2023-30547
62Bu hafta
Sandbox Escape in vm2
KritikCVSS 10,0Kavram kanıtıEPSS %72
- pre-auth RCE
vm2 project · vm217 Nis 2023
CVE-2023-29017
58Planlayın
vm2 Sandbox Escape vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %63
- pre-auth RCE
vm2 project · vm26 Nis 2023
CVE-2022-36067
54Planlayın
vm2 vulnerable to Sandbox Escape before v3.9.11
KritikCVSS 10,0Kavram kanıtıEPSS %48
- pre-auth RCE
vm2 project · vm26 Eyl 2022
CVE-2023-32314
42Planlayın
vm2 is a sandbox that can run untrusted code with Node's built-in modules.
KritikCVSS 10,0Kavram kanıtıEPSS %8
- pre-auth RCE
vm2 project · vm215 May 2023
CVE-2023-37903
41Planlayın
Sandbox Escape in vm2
KritikCVSS 10,0Kavram kanıtıEPSS %4
- pre-auth RCE
- Komut enjeksiyonu
vm2 project · vm221 Tem 2023
CVE-2023-37466
41Planlayın
vm2 Sandbox Escape vulnerability
KritikCVSS 10,0İstismar yokEPSS %4
- pre-auth RCE
vm2 project · vm213 Tem 2023
CVE-2023-29199
41Planlayın
vm2 Sandbox escape vulnerability
KritikCVSS 10,0İstismar yokEPSS %4
- pre-auth RCE
vm2 project · vm214 Nis 2023
CVE-2021-23449
41Planlayın
This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of arbitrary code on the host
KritikCVSS 10,0İstismar yokEPSS %4
- pre-auth RCE
- Prototype pollution
vm2 project · vm218 Eki 2021
CVE-2021-23555
40Planlayın
The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node internals during gen
KritikCVSS 9,8İstismar yokEPSS %3
- pre-auth RCE
vm2 project · vm211 Şub 2022
CVE-2026-22709
40Planlayın
vm2 has a Sandbox Escape
KritikCVSS 10,0İstismar yokEPSS %1
- pre-auth RCE
vm2 project · vm226 Oca 2026
CVE-2026-44005
40Planlayın
vm2 is an open source vm/sandbox for Node.js.
KritikCVSS 10,0İstismar yokEPSS %1
- pre-auth RCE
vm2 project · vm213 May 2026
CVE-2026-43997
40Planlayın
vm2 is an open source vm/sandbox for Node.js.
KritikCVSS 10,0İstismar yokEPSS %1
- pre-auth RCE
vm2 project · vm213 May 2026
CVE-2026-44006
40Planlayın
vm2 is an open source vm/sandbox for Node.js.
KritikCVSS 10,0İstismar yokEPSS %1
- pre-auth RCE
vm2 project · vm213 May 2026
CVE-2026-26332
40Planlayın
vm2 is an open source vm/sandbox for Node.js.
KritikCVSS 10,0İstismar yokEPSS %1
- pre-auth RCE
vm2 project · vm24 May 2026
CVE-2022-25893
39İzleyin
Arbitrary Code Execution
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
vm2 project · vm221 Ara 2022
CVE-2026-24781
39İzleyin
vm2: Sandbox Breakout Through Inspect
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
vm2 project · vm24 May 2026
CVE-2026-43999
39İzleyin
vm2: NodeVM builtin allowlist bypass via `module` builtin's `Module._load` allows sandbox escape
KritikCVSS 9,9İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
vm2 project · vm213 May 2026
CVE-2026-24118
39İzleyin
VM2 Sandbox Breakout Through __lookupGetter__
KritikCVSS 9,8Kavram kanıtıEPSS %1
- pre-auth RCE
vm2 project · vm24 May 2026
CVE-2026-45411
39İzleyin
vm2: Sandbox Breakout Using Async Generator
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
vm2 project · vm213 May 2026
CVE-2026-44008
39İzleyin
vm2: Snabox breakout via `neutralizeArraySpeciesBatch`
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
vm2 project · vm213 May 2026
CVE-2026-24120
39İzleyin
vm2: Sandbox Breakout Through Promise Species
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
vm2 project · vm24 May 2026
CVE-2026-26956
39İzleyin
vm2: WASM Sandbox Escape (Node 25 only)
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
vm2 project · vm24 May 2026
CVE-2026-44009
39İzleyin
vm2: Sandbox Breakout Through Null Proto Exception
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
vm2 project · vm213 May 2026
CVE-2026-44007
36İzleyin
vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution
KritikCVSS 9,1İstismar yokEPSS %1
- RCE
- Erişim denetimi (IDOR)
vm2 project · vm213 May 2026
CVE-2026-43998
34İzleyin
vm2: NodeVM require.root bypass via symlink traversal allows sandbox escape
YüksekCVSS 8,5İstismar yokEPSS %1
- RCE
vm2 project · vm213 May 2026