These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-92961 debrief: vm2 before 3.11.6 fails to enforce bufferAllocLimit on ArrayBuffer, SharedArrayBuffer, and TypedArray constructors, allowing attackers to allocate arbitrary host memory. This vulnerability enables attackers to bypass the buffer allocation cap, potentially leading to host process memory exhaustion and out-of-memory conditions. Defenders should assess exposure and prioritize verifica [truncated]
CVE-2026-92959 debrief: The vm2 library before version 3.11.8 does not fully enforce the allowAsync: false option in VM and NodeVM, allowing sandboxed scripts to schedule work outside the configured timeout via promise thenables. This vulnerability can lead to execution outside configured timeouts. Evidence is limited to CVE and NVD records, with some vendor advisories. Defenders should verify vm2 version [truncated]
CVE-2026-92958 debrief: vm2 through 3.11.6 contains a builtin-module denylist bypass in NodeVM, allowing sandboxed code to access the promise-based filesystem API despite fs being denied. This issue is fixed in vm2 3.11.7. The vulnerability enables sandboxed code to bypass the builtin-module denylist in NodeVM. Specifically, when using the builtin wildcard along with negative entries, negative entries are [truncated]
CVE-2026-92957 debrief based on CVE Program and NVD records. The vulnerability in vm2 through version 3.11.6 allows sandboxed code to access the host's child_process module, potentially leading to command-execution capability. This is due to improper normalization of node:-prefixed builtin specifiers when evaluating user-supplied negative entries in a NodeVM wildcard require policy. The issue is fixed in [truncated]
CVE-2026-92954 debrief based on the supplied source corpus. The vulnerability in vm2, a sandbox library for running untrusted JavaScript in Node.js, allows for host process termination via unhandled Promises. This issue arises from Promises returned from the host realm into the sandbox not being marked as handled at the bridge boundary. As a result, sandbox code can invoke host functions that return rejec [truncated]
CVE-2026-92953 debrief: vm2 versions from 3.11.0 before 3.11.8 fail to protect host TypedArray and ArrayBuffer prototypes from sandbox mutation. This vulnerability allows attackers to modify host Uint8Array.prototype, %TypedArray%.prototype, and ArrayBuffer.prototype using prototype-walking primitives. As a result, host-created typed arrays may observe attacker-controlled properties after VM.run() returns [truncated]
CVE-2026-92949 is a medium-severity vulnerability affecting vm2 versions from 3.9.6 before 3.11.7. The issue allows sandboxed scripts to bypass vm.freeze() and vm.readonly() protections by accessing frozen object properties. Attackers can exploit this using Object.getOwnPropertyDescriptor() or __lookupSetter__() to mutate read-only properties. Defenders responsible for systems using vm2 should assess expo [truncated]
CVE-2026-92948 debrief: vm2 NodeVM sandbox escape via node:test builtin allows for potential arbitrary JavaScript execution in Node.js environments. The vulnerability affects vm2 versions >= 3.9.6 and <= 3.11.6, permitting a sandbox escape on Node.js 24 and newer when the embedder explicitly allows the node:test builtin. This could lead to elevated privileges and risk of sandbox escape. Node.js and vm2 us [truncated]
CVE-2026-92944 is a critical sandbox escape vulnerability in vm2 versions 3.10.2 through 3.11.6 on Node.js 26. The vulnerability allows attackers to bypass vm2's wrapper protections using Promise.prototype.finally() due to a stale PromiseThenLookupChain protector in V8 14.6. This can lead to arbitrary code execution on the host system. Affected users should assess their exposure and apply patches or mitig [truncated]
CVE-2026-92942 debrief: vm2 before 3.11.7 does not enforce timeouts on code executed outside synchronous VM#run() calls, allowing sandboxed code to block the host event loop via FinalizationRegistry cleanup callbacks. This issue can lead to denial of service. Defenders should verify exposure, assess impact, and consider upgrading to vm2 version 3.11.7 or later. The CVE description and source references in [truncated]
CVE-2026-92938 debrief based on CVE Program and NVD records, and Vulncheck source references. The vulnerability in vm2 versions 3.11.3 through 3.11.6 allows sandboxed plugins to execute arbitrary native code outside the sandbox with host process privileges. Defenders should verify vm2 versions, review NodeVM configurations, and monitor plugin activity to assess exposure and prioritize updates. The issue i [truncated]
CVE-2026-92937 debrief based on CVE Program and NVD records. The CVE record was published on 2026-09-17T14:17:58.517Z and has not been modified since then. The NVD entry is currently Deferred. This critical vulnerability in vm2 3.11.6 allows for remote code execution via a sandbox escape, impacting systems with untrusted code execution contexts. Defenders should assess exposure and prioritize upgrading to [truncated]
A vulnerability in vm2, a sandbox for running untrusted Node.js code, allows sandboxed code to access the host process's full call stack on Node.js >= 22.9. This issue is fixed in vm2 3.11.8. The vulnerability arises from vm2 versions <= 3.11.7 exposing the host `util` module to the sandbox as an unfiltered shallow copy, allowing sandboxed code to access `util.getCallSites()` on Node.js >= 22.9. This API [truncated]
CVE-2026-47698 is a critical vulnerability in the vm2 open source vm/sandbox for Node.js. The issue allows sandbox code to execute arbitrary host commands by manipulating the prototype chain of host intrinsics. This vulnerability is fixed in version 3.11.6. Affected Node.js developers and administrators should assess exposure, verify potential impact, and apply the fixed version or relevant patches. The v [truncated]
CVE-2026-47686 debrief based on the supplied source corpus. The CVE record was published on 2026-08-17T21:16:45.507Z and has not been modified since then. This critical vulnerability in vm2, an open-source vm/sandbox for Node.js, allows sandbox code to obtain powerful host objects, potentially leading to arbitrary host command execution. The issue is fixed in version 3.11.6. Node.js developers and adminis [truncated]
CVE-2026-47683 is a high-severity vulnerability in the vm2 open source vm/sandbox for Node.js. The bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concat(list, totalLength) or Buffer.from(arrayLike) with an attacker-controlled length, allowing sandbox code to perform large synchronous host external-memory allocations that bypass the configured cap and can exhaust the host proces [truncated]
CVE-2026-47210 is a critical sandbox escape vulnerability in vm2, an open-source vm/sandbox for Node.js. The vulnerability allows arbitrary code execution in the host process when untrusted code is executed with async support on runtimes exposing WebAssembly JSPI. This issue was patched in version 3.11.4.
CVE-2026-47209 is a HIGH severity vulnerability in vm2, an open-source vm/sandbox for Node.js. The vulnerability allows for a sandbox bypass due to improper set trap implementation in the BaseHandler, enabling an attacker to write to the host target object. This could lead to the bypassing of future security guards and the writing of dangerous cross-realm Symbol keys to host objects.
CVE-2026-47141 is a vulnerability in vm2, an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM exposes some process-wide observability builtins when they are allowed through require.builtin. The diagnostics_channel, async_hooks, and perf_hooks builtins are not blocked by the dangerous builtin denylist. These modules are process-wide, not sandbox-local. Sandboxed code can use them to obse [truncated]
CVE-2026-47139 is a HIGH severity vulnerability in vm2, an open-source vm/sandbox for Node.js. The vulnerability allows sandboxed code to make outbound HTTP(S) requests and open listening HTTP sockets, despite the public network modules being denied. This is possible due to the exposure of underscored internal HTTP builtins such as _http_client and _http_server, which are not blocked when public modules are excluded.
CVE-2026-47137 is a critical vulnerability in vm2, an open-source vm/sandbox for Node.js. Prior to version 3.11.4, a fix introduced for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) was incomplete. The check in nodevm.js line 263 blocks the combination nesting: true + require: false using strict equality (options.require === false). However, this check can be bypassed by omitting the require option entirely, causi [truncated]
CVE-2026-47135 is a HIGH-severity vulnerability in vm2, an open-source vm/sandbox for Node.js. Prior to version 3.11.4, the Symbol.for override in setup-sandbox.js only intercepts 2 of 9 dangerous Node.js cross-realm symbols. This allows sandbox code to obtain real cross-realm symbols, write them to host objects, and control host-side behavior. The vulnerability has been patched in version 3.11.4.
CVE-2026-47131 is a critical vulnerability in vm2, an open-source vm/sandbox for Node.js. The vulnerability allows attackers to escape the sandbox and run arbitrary code. This is achieved by combining Buffer.call.call({}.__lookupGetter__, Buffer, '__proto__'), Buffer.call.call({}.__lookupSetter__, Buffer, '__proto__'), and Node.js's ERR_INVALID_ARG_TYPE Error, which allows the host's TypeError constructor [truncated]
CVE-2026-44007 is a critical vulnerability in vm2, a Node.js sandbox module. The vulnerability allows sandbox code to escape and execute arbitrary OS commands. This is possible when a NodeVM is created with nesting: true, allowing sandbox code to unconditionally require('vm2') regardless of the outer VM's require configuration. With access to vm2, the sandbox constructs a new inner NodeVM with its own unr [truncated]
CVE-2026-43998 is a high-severity vulnerability in vm2, a Node.js sandbox, that allows attackers to bypass path restrictions and execute arbitrary code. The vulnerability exists in version 3.10.5 of vm2 and is caused by a discrepancy between path validation and module loading. An attacker can exploit this vulnerability by creating a symlink to a module outside the allowed root directory, allowing them to [truncated]
CVE-2026-24120 is a critical vulnerability in vm2, a Node.js sandbox, allowing attackers to escape the sandbox and execute arbitrary commands on the host system. The issue arises from an insufficient fix for CVE-2023-37466 in vm2 versions prior to 3.10.5. This vulnerability has a CVSS score of 9.8 and is considered critical. The vulnerability was published on May 4, 2026, and last modified on June 30, 202 [truncated]
