vm2 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM vm2 CVE published 2026-09-17

CVE-2026-92963

CVE-2026-92963 debrief based on the supplied source corpus. The CVE record was published on 2026-09-17T14:18:02.783Z and has not been modified since then. This vulnerability affects vm2 versions before 3.11.2, which fail to restrict access to the VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL global variable, potentially exposing sensitive sandbox internals. Defenders should assess exposure and priori [truncated]