{"schema_version":"2","view":"grouped","data":[{"id":62016,"cve_ids":["CVE-2026-92957"],"payload":{"kind":"advisory","title":"vm2 before 3.11.7 NodeVM Builtin Deny-List Bypass via node: Prefix","summary":"vm2 through 3.11.6 does not normalize `node:`-prefixed builtin specifiers when evaluating user-supplied negative (deny) entries in a NodeVM wildcard require policy. Although NodeVM strips the `node:` prefix during require() resolution, negative wildcard entries are matched by exact string comparison against the canonical builtin names, so a policy such as `new NodeVM({ require: { builtin: ['*', '-node:child_process'] } })` fails to deny the canonical `child_process` module. Sandboxed code can therefore obtain the host `child_process` builtin via `require('child_process')` or `require('node:child_process')`, gaining references to process-spawning APIs such as execSync and spawn, which is equivalent to host command-execution capability for untrusted sandbox code. Fixed in vm2 3.11.7.","evidence":"cve:CVE-2026-92957","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-92957","aliases":["CVE-2026-92957"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.4,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"0","lessThan":"3.11.7","versionType":"semver"},{"status":"unaffected","version":"3.11.7","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-09-26T13:30:01.519Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-8686-vhfx-7r3j","https://www.vulncheck.com/advisories/vm2-before-3.11.7-authentication-bypass-via-node-prefix"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-92957","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-17T17:24:58.866510Z"}}}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-8686-vhfx-7r3j","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T17:25:19.354Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:30:01.519Z"}}},"related_cves":[{"value":"CVE-2026-92957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:933f4619-3c2c-42c0-a1a7-87142edd08fc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-92957","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}],"products":[{"name":{"value":"vm2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"critical","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-8686-vhfx-7r3j","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92957","advisory_id":"933f4619-3c2c-42c0-a1a7-87142edd08fc","event_types":["advisory"],"published_at":"2026-10-25T18:59:46.356392+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T13:46:14.875+00:00","detail_url":"/advisories/advisory%3A933f4619-3c2c-42c0-a1a7-87142edd08fc","group":{"id":"advisory:933f4619-3c2c-42c0-a1a7-87142edd08fc","revision":1,"primary_event_id":61258,"change":"published","superseded_by":[],"changed":{"id":61258,"cve_ids":["CVE-2026-92957"],"payload":{"kind":"advisory","title":"vm2 before 3.11.7 NodeVM Builtin Deny-List Bypass via node: Prefix","summary":"vm2 through 3.11.6 does not normalize `node:`-prefixed builtin specifiers when evaluating user-supplied negative (deny) entries in a NodeVM wildcard require policy. Although NodeVM strips the `node:` prefix during require() resolution, negative wildcard entries are matched by exact string comparison against the canonical builtin names, so a policy such as `new NodeVM({ require: { builtin: ['*', '-node:child_process'] } })` fails to deny the canonical `child_process` module. Sandboxed code can therefore obtain the host `child_process` builtin via `require('child_process')` or `require('node:child_process')`, gaining references to process-spawning APIs such as execSync and spawn, which is equivalent to host command-execution capability for untrusted sandbox code. Fixed in vm2 3.11.7.","evidence":"cve:CVE-2026-92957","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-92957","aliases":["CVE-2026-92957"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.4,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"0","lessThan":"3.11.7","versionType":"semver"},{"status":"unaffected","version":"3.11.7","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-09-26T13:30:01.519Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-8686-vhfx-7r3j","https://www.vulncheck.com/advisories/vm2-before-3.11.7-authentication-bypass-via-node-prefix"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-92957","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-17T17:24:58.866510Z"}}}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-8686-vhfx-7r3j","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T17:25:19.354Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:30:01.519Z"}}},"related_cves":[{"value":"CVE-2026-92957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:933f4619-3c2c-42c0-a1a7-87142edd08fc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-92957","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}],"products":[{"name":{"value":"vm2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"critical","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-8686-vhfx-7r3j","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92957","advisory_id":"933f4619-3c2c-42c0-a1a7-87142edd08fc","event_types":["advisory"],"published_at":"2026-10-25T18:59:46.356392+00:00","technologies":["core-cve","vm2"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-17T13:46:14.875+00:00","detail_url":"/events/61258"},"members":[{"id":61258,"cve_ids":["CVE-2026-92957"],"payload":{"kind":"advisory","title":"vm2 before 3.11.7 NodeVM Builtin Deny-List Bypass via node: Prefix","summary":"vm2 through 3.11.6 does not normalize `node:`-prefixed builtin specifiers when evaluating user-supplied negative (deny) entries in a NodeVM wildcard require policy. Although NodeVM strips the `node:` prefix during require() resolution, negative wildcard entries are matched by exact string comparison against the canonical builtin names, so a policy such as `new NodeVM({ require: { builtin: ['*', '-node:child_process'] } })` fails to deny the canonical `child_process` module. Sandboxed code can therefore obtain the host `child_process` builtin via `require('child_process')` or `require('node:child_process')`, gaining references to process-spawning APIs such as execSync and spawn, which is equivalent to host command-execution capability for untrusted sandbox code. Fixed in vm2 3.11.7.","evidence":"cve:CVE-2026-92957","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-92957","aliases":["CVE-2026-92957"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.4,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"0","lessThan":"3.11.7","versionType":"semver"},{"status":"unaffected","version":"3.11.7","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-09-26T13:30:01.519Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-8686-vhfx-7r3j","https://www.vulncheck.com/advisories/vm2-before-3.11.7-authentication-bypass-via-node-prefix"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-92957","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-17T17:24:58.866510Z"}}}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-8686-vhfx-7r3j","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T17:25:19.354Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:30:01.519Z"}}},"related_cves":[{"value":"CVE-2026-92957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:933f4619-3c2c-42c0-a1a7-87142edd08fc","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-92957","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}],"products":[{"name":{"value":"vm2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.11.7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"critical","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-8686-vhfx-7r3j","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92957","advisory_id":"933f4619-3c2c-42c0-a1a7-87142edd08fc","event_types":["advisory"],"published_at":"2026-10-25T18:59:46.356392+00:00","technologies":["core-cve","vm2"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-17T13:46:14.875+00:00","detail_url":"/events/61258"}]}},{"id":7614,"cve_ids":["CVE-2026-100723"],"payload":{"kind":"advisory","title":"vm2 before 3.12.2 Memory Disclosure via zlib Buffer Pool","summary":"vm2 before 3.12.2 does not apply its Buffer backing-store ownership invariant (byteOffset === 0 and buffer.byteLength === length) to Buffers returned from host builtin modules. When an application explicitly exposes Node's zlib module through NodeVM's builtin allowlist (require: { builtin: ['zlib'] }), zlib.deflateSync can return a Buffer backed by Node's shared small-buffer pool whose .buffer is the entire pool. Untrusted guest code can construct a full-width view of that ArrayBuffer (Buffer.from(result.buffer, 0, result.buffer.byteLength)) to read and modify bytes belonging to unrelated host buffers, disclosing and corrupting host-realm memory across the sandbox boundary.","evidence":"cve:CVE-2026-100723","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100723","aliases":["CVE-2026-100723"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"0","lessThan":"3.12.2","versionType":"semver"},{"status":"unaffected","version":"3.12.2","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-10-01T18:04:57.414Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-489w-w794-jq94","https://github.com/patriksimek/vm2/commit/4f2508abeb252aa86eb6761c78b3b000248fb089","https://github.com/patriksimek/vm2/commit/5214b02ef13b82497fcb917b45320dfd014ffd09","https://www.vulncheck.com/advisories/vm2-before-3.12.2-memory-disclosure-via-zlib-buffer-pool"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100723","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-01T18:04:51.057802Z"}}}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-489w-w794-jq94","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-01T18:04:57.414Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-27T01:28:30.027Z"}}},"related_cves":[{"value":"CVE-2026-100723","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2e123dab-7eef-4765-bd2a-6b4f193323fc","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100723","advisory_id":"2e123dab-7eef-4765-bd2a-6b4f193323fc","event_types":["advisory"],"published_at":"2026-10-24T22:47:35.139445+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T01:28:30.027+00:00","detail_url":"/advisories/advisory%3A2e123dab-7eef-4765-bd2a-6b4f193323fc","group":{"id":"advisory:2e123dab-7eef-4765-bd2a-6b4f193323fc","revision":1,"primary_event_id":7613,"change":"published","superseded_by":[],"changed":{"id":7613,"cve_ids":["CVE-2026-100723"],"payload":{"kind":"advisory","title":"vm2 before 3.12.2 Memory Disclosure via zlib Buffer Pool","summary":"vm2 before 3.12.2 does not apply its Buffer backing-store ownership invariant (byteOffset === 0 and buffer.byteLength === length) to Buffers returned from host builtin modules. When an application explicitly exposes Node's zlib module through NodeVM's builtin allowlist (require: { builtin: ['zlib'] }), zlib.deflateSync can return a Buffer backed by Node's shared small-buffer pool whose .buffer is the entire pool. Untrusted guest code can construct a full-width view of that ArrayBuffer (Buffer.from(result.buffer, 0, result.buffer.byteLength)) to read and modify bytes belonging to unrelated host buffers, disclosing and corrupting host-realm memory across the sandbox boundary.","evidence":"cve:CVE-2026-100723","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100723","aliases":["CVE-2026-100723"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"0","lessThan":"3.12.2","versionType":"semver"},{"status":"unaffected","version":"3.12.2","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-10-01T18:04:57.414Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-489w-w794-jq94","https://github.com/patriksimek/vm2/commit/4f2508abeb252aa86eb6761c78b3b000248fb089","https://github.com/patriksimek/vm2/commit/5214b02ef13b82497fcb917b45320dfd014ffd09","https://www.vulncheck.com/advisories/vm2-before-3.12.2-memory-disclosure-via-zlib-buffer-pool"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100723","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-01T18:04:51.057802Z"}}}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-489w-w794-jq94","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-01T18:04:57.414Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-27T01:28:30.027Z"}}},"related_cves":[{"value":"CVE-2026-100723","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2e123dab-7eef-4765-bd2a-6b4f193323fc","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100723","advisory_id":"2e123dab-7eef-4765-bd2a-6b4f193323fc","event_types":["advisory"],"published_at":"2026-10-24T22:47:35.139445+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T01:28:30.027+00:00","detail_url":"/events/7613"},"members":[{"id":7613,"cve_ids":["CVE-2026-100723"],"payload":{"kind":"advisory","title":"vm2 before 3.12.2 Memory Disclosure via zlib Buffer Pool","summary":"vm2 before 3.12.2 does not apply its Buffer backing-store ownership invariant (byteOffset === 0 and buffer.byteLength === length) to Buffers returned from host builtin modules. When an application explicitly exposes Node's zlib module through NodeVM's builtin allowlist (require: { builtin: ['zlib'] }), zlib.deflateSync can return a Buffer backed by Node's shared small-buffer pool whose .buffer is the entire pool. Untrusted guest code can construct a full-width view of that ArrayBuffer (Buffer.from(result.buffer, 0, result.buffer.byteLength)) to read and modify bytes belonging to unrelated host buffers, disclosing and corrupting host-realm memory across the sandbox boundary.","evidence":"cve:CVE-2026-100723","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100723","aliases":["CVE-2026-100723"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"LOW","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"0","lessThan":"3.12.2","versionType":"semver"},{"status":"unaffected","version":"3.12.2","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-10-01T18:04:57.414Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-489w-w794-jq94","https://github.com/patriksimek/vm2/commit/4f2508abeb252aa86eb6761c78b3b000248fb089","https://github.com/patriksimek/vm2/commit/5214b02ef13b82497fcb917b45320dfd014ffd09","https://www.vulncheck.com/advisories/vm2-before-3.12.2-memory-disclosure-via-zlib-buffer-pool"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100723","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-01T18:04:51.057802Z"}}}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-489w-w794-jq94","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-01T18:04:57.414Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-27T01:28:30.027Z"}}},"related_cves":[{"value":"CVE-2026-100723","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2e123dab-7eef-4765-bd2a-6b4f193323fc","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100723","advisory_id":"2e123dab-7eef-4765-bd2a-6b4f193323fc","event_types":["advisory"],"published_at":"2026-10-24T22:47:35.139445+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T01:28:30.027+00:00","detail_url":"/events/7613"}]}},{"id":3213,"cve_ids":["CVE-2026-100721"],"payload":{"kind":"advisory","title":"vm2 before 3.12.2 Authorization Bypass via Custom Resolver","summary":"vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures `require.external` with a custom resolver (and `context: 'host'`), `LegacyResolver.customResolve` in lib/resolver-compat.js records the resolved module directory in `this.externals` as `new RegExp('^' + escapeRegExp(resolvedPath))`, without requiring a path separator or end-of-string boundary. Untrusted guest code can therefore require the allowlisted module (e.g. `foo`) and then require the absolute path of a non-allowlisted sibling whose path merely shares the resolved prefix (e.g. `.../node_modules/foo2/index.js`); the sibling passes `isPathAllowedForModule` and is loaded through `hostRequire`, so its top-level code runs in the host process before the exports are wrapped with `vm.readonly`, resulting in a sandbox escape and arbitrary code execution in the host context.","evidence":"cve:CVE-2026-100721","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100721","aliases":["CVE-2026-100721"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.5,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"0","lessThan":"3.12.2","versionType":"semver"},{"status":"unaffected","version":"3.12.2","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:51:10.611Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-5h3f-q97h-ccvc","https://github.com/patriksimek/vm2/commit/6ac3916da84e060c403e407b6b6318fcc66b0e72","https://github.com/patriksimek/vm2/commit/ab4ee7d803e8c80155e9eb3672226bddbca4aa9c","https://github.com/patriksimek/vm2/commit/91034466bfb7f56b95fd48083ec6ca36d058f164","https://www.vulncheck.com/advisories/vm2-before-3.12.2-authorization-bypass-via-custom-resolver"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100721","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T16:50:50.404410Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:51:10.611Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-27T01:28:28.596Z"}}},"related_cves":[{"value":"CVE-2026-100721","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aab20d8e-f70b-415d-b5ae-c6db7dd9c231","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100721","advisory_id":"aab20d8e-f70b-415d-b5ae-c6db7dd9c231","event_types":["advisory"],"published_at":"2026-10-24T21:31:30.252226+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T01:28:28.596+00:00","detail_url":"/advisories/advisory%3Aaab20d8e-f70b-415d-b5ae-c6db7dd9c231","group":{"id":"advisory:aab20d8e-f70b-415d-b5ae-c6db7dd9c231","revision":1,"primary_event_id":3225,"change":"published","superseded_by":[],"changed":{"id":3225,"cve_ids":["CVE-2026-100721"],"payload":{"kind":"advisory","title":"vm2 before 3.12.2 Authorization Bypass via Custom Resolver","summary":"vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures `require.external` with a custom resolver (and `context: 'host'`), `LegacyResolver.customResolve` in lib/resolver-compat.js records the resolved module directory in `this.externals` as `new RegExp('^' + escapeRegExp(resolvedPath))`, without requiring a path separator or end-of-string boundary. Untrusted guest code can therefore require the allowlisted module (e.g. `foo`) and then require the absolute path of a non-allowlisted sibling whose path merely shares the resolved prefix (e.g. `.../node_modules/foo2/index.js`); the sibling passes `isPathAllowedForModule` and is loaded through `hostRequire`, so its top-level code runs in the host process before the exports are wrapped with `vm.readonly`, resulting in a sandbox escape and arbitrary code execution in the host context.","evidence":"cve:CVE-2026-100721","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100721","aliases":["CVE-2026-100721"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.5,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"0","lessThan":"3.12.2","versionType":"semver"},{"status":"unaffected","version":"3.12.2","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:51:10.611Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-5h3f-q97h-ccvc","https://github.com/patriksimek/vm2/commit/6ac3916da84e060c403e407b6b6318fcc66b0e72","https://github.com/patriksimek/vm2/commit/ab4ee7d803e8c80155e9eb3672226bddbca4aa9c","https://github.com/patriksimek/vm2/commit/91034466bfb7f56b95fd48083ec6ca36d058f164","https://www.vulncheck.com/advisories/vm2-before-3.12.2-authorization-bypass-via-custom-resolver"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100721","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T16:50:50.404410Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:51:10.611Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-27T01:28:28.596Z"}}},"related_cves":[{"value":"CVE-2026-100721","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aab20d8e-f70b-415d-b5ae-c6db7dd9c231","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100721","advisory_id":"aab20d8e-f70b-415d-b5ae-c6db7dd9c231","event_types":["advisory"],"published_at":"2026-10-24T21:31:30.252226+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T01:28:28.596+00:00","detail_url":"/events/3225"},"members":[{"id":3225,"cve_ids":["CVE-2026-100721"],"payload":{"kind":"advisory","title":"vm2 before 3.12.2 Authorization Bypass via Custom Resolver","summary":"vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures `require.external` with a custom resolver (and `context: 'host'`), `LegacyResolver.customResolve` in lib/resolver-compat.js records the resolved module directory in `this.externals` as `new RegExp('^' + escapeRegExp(resolvedPath))`, without requiring a path separator or end-of-string boundary. Untrusted guest code can therefore require the allowlisted module (e.g. `foo`) and then require the absolute path of a non-allowlisted sibling whose path merely shares the resolved prefix (e.g. `.../node_modules/foo2/index.js`); the sibling passes `isPathAllowedForModule` and is loaded through `hostRequire`, so its top-level code runs in the host process before the exports are wrapped with `vm.readonly`, resulting in a sandbox escape and arbitrary code execution in the host context.","evidence":"cve:CVE-2026-100721","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-100721","aliases":["CVE-2026-100721"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.5,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"0","lessThan":"3.12.2","versionType":"semver"},{"status":"unaffected","version":"3.12.2","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:51:10.611Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-5h3f-q97h-ccvc","https://github.com/patriksimek/vm2/commit/6ac3916da84e060c403e407b6b6318fcc66b0e72","https://github.com/patriksimek/vm2/commit/ab4ee7d803e8c80155e9eb3672226bddbca4aa9c","https://github.com/patriksimek/vm2/commit/91034466bfb7f56b95fd48083ec6ca36d058f164","https://www.vulncheck.com/advisories/vm2-before-3.12.2-authorization-bypass-via-custom-resolver"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100721","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T16:50:50.404410Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:51:10.611Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-27T01:28:28.596Z"}}},"related_cves":[{"value":"CVE-2026-100721","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aab20d8e-f70b-415d-b5ae-c6db7dd9c231","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100721","advisory_id":"aab20d8e-f70b-415d-b5ae-c6db7dd9c231","event_types":["advisory"],"published_at":"2026-10-24T21:31:30.252226+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T01:28:28.596+00:00","detail_url":"/events/3225"}]}},{"id":3102,"cve_ids":["CVE-2026-100722"],"payload":{"kind":"advisory","title":"vm2 before 3.12.2 Host Process Termination via Construct Trap","summary":"vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host construct trap. In BaseHandler, the apply trap calls markHostPromiseHandled() on the returned value, but the adjacent construct path returns the result of Reflect.construct without the same sanitization. If an embedder exposes a constructable host function whose constructor returns a native rejected Promise, an untrusted script executed via VM.run can invoke it with `new` and ignore the result; the rejected host Promise crosses the bridge unhandled and, under Node's strict unhandled-rejection policy, is promoted to an uncaught exception that terminates the host process.","evidence":"cve:CVE-2026-100722","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100722","aliases":["CVE-2026-100722"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"0","lessThan":"3.12.2","versionType":"semver"},{"status":"unaffected","version":"3.12.2","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-09-28T13:51:49.241Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-2v2p-6j97-cjg9","https://www.vulncheck.com/advisories/vm2-before-3.12.2-host-process-termination-via-construct-trap"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100722","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T13:51:25.270432Z"}}}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-2v2p-6j97-cjg9","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T13:51:49.241Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-27T01:28:29.295Z"}}},"related_cves":[{"value":"CVE-2026-100722","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:23efb265-963f-4d61-ba42-561cdb87d54a","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100722","advisory_id":"23efb265-963f-4d61-ba42-561cdb87d54a","event_types":["advisory"],"published_at":"2026-10-24T21:29:25.909104+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T01:28:29.295+00:00","detail_url":"/advisories/advisory%3A23efb265-963f-4d61-ba42-561cdb87d54a","group":{"id":"advisory:23efb265-963f-4d61-ba42-561cdb87d54a","revision":1,"primary_event_id":3111,"change":"published","superseded_by":[],"changed":{"id":3111,"cve_ids":["CVE-2026-100722"],"payload":{"kind":"advisory","title":"vm2 before 3.12.2 Host Process Termination via Construct Trap","summary":"vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host construct trap. In BaseHandler, the apply trap calls markHostPromiseHandled() on the returned value, but the adjacent construct path returns the result of Reflect.construct without the same sanitization. If an embedder exposes a constructable host function whose constructor returns a native rejected Promise, an untrusted script executed via VM.run can invoke it with `new` and ignore the result; the rejected host Promise crosses the bridge unhandled and, under Node's strict unhandled-rejection policy, is promoted to an uncaught exception that terminates the host process.","evidence":"cve:CVE-2026-100722","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100722","aliases":["CVE-2026-100722"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"0","lessThan":"3.12.2","versionType":"semver"},{"status":"unaffected","version":"3.12.2","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-09-28T13:51:49.241Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-2v2p-6j97-cjg9","https://www.vulncheck.com/advisories/vm2-before-3.12.2-host-process-termination-via-construct-trap"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100722","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T13:51:25.270432Z"}}}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-2v2p-6j97-cjg9","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T13:51:49.241Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-27T01:28:29.295Z"}}},"related_cves":[{"value":"CVE-2026-100722","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:23efb265-963f-4d61-ba42-561cdb87d54a","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100722","advisory_id":"23efb265-963f-4d61-ba42-561cdb87d54a","event_types":["advisory"],"published_at":"2026-10-24T21:29:25.909104+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T01:28:29.295+00:00","detail_url":"/events/3111"},"members":[{"id":3111,"cve_ids":["CVE-2026-100722"],"payload":{"kind":"advisory","title":"vm2 before 3.12.2 Host Process Termination via Construct Trap","summary":"vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host construct trap. In BaseHandler, the apply trap calls markHostPromiseHandled() on the returned value, but the adjacent construct path returns the result of Reflect.construct without the same sanitization. If an embedder exposes a constructable host function whose constructor returns a native rejected Promise, an untrusted script executed via VM.run can invoke it with `new` and ignore the result; the rejected host Promise crosses the bridge unhandled and, under Node's strict unhandled-rejection policy, is promoted to an uncaught exception that terminates the host process.","evidence":"cve:CVE-2026-100722","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-100722","aliases":["CVE-2026-100722"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.9,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"0","lessThan":"3.12.2","versionType":"semver"},{"status":"unaffected","version":"3.12.2","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-09-28T13:51:49.241Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-2v2p-6j97-cjg9","https://www.vulncheck.com/advisories/vm2-before-3.12.2-host-process-termination-via-construct-trap"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-100722","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T13:51:25.270432Z"}}}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-2v2p-6j97-cjg9","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T13:51:49.241Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-27T01:28:29.295Z"}}},"related_cves":[{"value":"CVE-2026-100722","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:23efb265-963f-4d61-ba42-561cdb87d54a","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100722","advisory_id":"23efb265-963f-4d61-ba42-561cdb87d54a","event_types":["advisory"],"published_at":"2026-10-24T21:29:25.909104+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-27T01:28:29.295+00:00","detail_url":"/events/3111"}]}},{"id":2365,"cve_ids":["CVE-2026-92954"],"payload":{"kind":"advisory","title":"vm2 3.10.0 through 3.11.7 Denial of Service via Host Promise","summary":"vm2 is a sandbox library for running untrusted JavaScript in Node.js. In versions >= 3.10.0 and <= 3.11.7, Promises returned from the host realm into the sandbox are not marked as handled at the bridge boundary; only Promises created inside the sandbox are wrapped with a rejection-swallowing handler (lib/setup-sandbox.js), and the bridge only installs host-side rejection sanitizers when sandbox code calls .then/.catch/.finally. As a result, code running in the sandbox can invoke a host function that returns a rejected Promise (for example events.once() exposed via the NodeVM events builtin, or any embedder-provided Promise-returning API) and simply ignore the return value, leaving the host Promise unhandled so that Node.js's default unhandled-rejection behavior terminates the host process. This is an incomplete fix of GHSA-hw58-p9xv-2mjh. The issue is fixed in version 3.11.8.","evidence":"cve:CVE-2026-92954","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-92954","aliases":["CVE-2026-92954"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.2,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"3.10.0","lessThan":"3.11.8","versionType":"semver"},{"status":"unaffected","version":"3.11.8","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-09-26T13:30:00.813Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-gjq8-xm47-88rc","https://www.vulncheck.com/advisories/vm2-3.10.0-through-3.11.5-denial-of-service-via-host-promise"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-92954","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-21T17:15:31.102120Z"}}}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-gjq8-xm47-88rc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-21T17:15:56.296Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:30:00.813Z"}}},"related_cves":[{"value":"CVE-2026-92954","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c67719ed-10a0-4e58-b664-8166bca27dc6","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92954","advisory_id":"c67719ed-10a0-4e58-b664-8166bca27dc6","event_types":["advisory"],"published_at":"2026-10-24T21:17:41.06535+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T13:46:12.82+00:00","detail_url":"/advisories/advisory%3Ac67719ed-10a0-4e58-b664-8166bca27dc6","group":{"id":"advisory:c67719ed-10a0-4e58-b664-8166bca27dc6","revision":1,"primary_event_id":2367,"change":"published","superseded_by":[],"changed":{"id":2367,"cve_ids":["CVE-2026-92954"],"payload":{"kind":"advisory","title":"vm2 3.10.0 through 3.11.7 Denial of Service via Host Promise","summary":"vm2 is a sandbox library for running untrusted JavaScript in Node.js. In versions >= 3.10.0 and <= 3.11.7, Promises returned from the host realm into the sandbox are not marked as handled at the bridge boundary; only Promises created inside the sandbox are wrapped with a rejection-swallowing handler (lib/setup-sandbox.js), and the bridge only installs host-side rejection sanitizers when sandbox code calls .then/.catch/.finally. As a result, code running in the sandbox can invoke a host function that returns a rejected Promise (for example events.once() exposed via the NodeVM events builtin, or any embedder-provided Promise-returning API) and simply ignore the return value, leaving the host Promise unhandled so that Node.js's default unhandled-rejection behavior terminates the host process. This is an incomplete fix of GHSA-hw58-p9xv-2mjh. The issue is fixed in version 3.11.8.","evidence":"cve:CVE-2026-92954","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-92954","aliases":["CVE-2026-92954"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.2,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"3.10.0","lessThan":"3.11.8","versionType":"semver"},{"status":"unaffected","version":"3.11.8","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-09-26T13:30:00.813Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-gjq8-xm47-88rc","https://www.vulncheck.com/advisories/vm2-3.10.0-through-3.11.5-denial-of-service-via-host-promise"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-92954","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-21T17:15:31.102120Z"}}}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-gjq8-xm47-88rc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-21T17:15:56.296Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:30:00.813Z"}}},"related_cves":[{"value":"CVE-2026-92954","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c67719ed-10a0-4e58-b664-8166bca27dc6","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92954","advisory_id":"c67719ed-10a0-4e58-b664-8166bca27dc6","event_types":["advisory"],"published_at":"2026-10-24T21:17:41.06535+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T13:46:12.82+00:00","detail_url":"/events/2367"},"members":[{"id":2367,"cve_ids":["CVE-2026-92954"],"payload":{"kind":"advisory","title":"vm2 3.10.0 through 3.11.7 Denial of Service via Host Promise","summary":"vm2 is a sandbox library for running untrusted JavaScript in Node.js. In versions >= 3.10.0 and <= 3.11.7, Promises returned from the host realm into the sandbox are not marked as handled at the bridge boundary; only Promises created inside the sandbox are wrapped with a rejection-swallowing handler (lib/setup-sandbox.js), and the bridge only installs host-side rejection sanitizers when sandbox code calls .then/.catch/.finally. As a result, code running in the sandbox can invoke a host function that returns a rejected Promise (for example events.once() exposed via the NodeVM events builtin, or any embedder-provided Promise-returning API) and simply ignore the return value, leaving the host Promise unhandled so that Node.js's default unhandled-rejection behavior terminates the host process. This is an incomplete fix of GHSA-hw58-p9xv-2mjh. The issue is fixed in version 3.11.8.","evidence":"cve:CVE-2026-92954","products":[{"name":{"value":"vm2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-92954","aliases":["CVE-2026-92954"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.2,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"patriksimek","product":"vm2","versions":[{"status":"affected","version":"3.10.0","lessThan":"3.11.8","versionType":"semver"},{"status":"unaffected","version":"3.11.8","versionType":"semver"}],"packageURL":"pkg:npm/vm2","defaultStatus":"unaffected"}],"modified":"2026-09-26T13:30:00.813Z","provider":"cve","references":["https://github.com/patriksimek/vm2/security/advisories/GHSA-gjq8-xm47-88rc","https://www.vulncheck.com/advisories/vm2-3.10.0-through-3.11.5-denial-of-service-via-host-promise"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-92954","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-21T17:15:31.102120Z"}}}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-gjq8-xm47-88rc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-21T17:15:56.296Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-26T13:30:00.813Z"}}},"related_cves":[{"value":"CVE-2026-92954","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c67719ed-10a0-4e58-b664-8166bca27dc6","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-92954","advisory_id":"c67719ed-10a0-4e58-b664-8166bca27dc6","event_types":["advisory"],"published_at":"2026-10-24T21:17:41.06535+00:00","technologies":["core-cve","vm2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-17T13:46:12.82+00:00","detail_url":"/events/2367"}]}}],"next_after":62016,"next_before":2365}