npm/vm2

vm2 Has a Sandbox Breakout Using Async Generator

Modified: 5/14/2026

vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector

Modified: 10/1/2026

vm2 has access to `VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL`

Modified: 9/18/2026

vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process

Modified: 10/5/2026

vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix

Modified: 10/5/2026

vm2 crypto builtin loads attacker native code through setEngine

Modified: 10/1/2026

vm2 Access to Host Object Enables Sandbox Escape

Modified: 5/14/2026

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

Modified: 10/5/2026

vm2 vulnerable to Arbitrary Code Execution

Modified: 11/8/2023

VM2 Has a Sandbox Escape Issue via SuppressedError

Modified: 5/5/2026

vm2: NodeVM custom resolution bypasses external path boundaries

Modified: 10/5/2026

vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor

Modified: 10/1/2026

vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection

Modified: 10/1/2026

vm2 Sandbox Access to Host Buffer.alloc Allows timeout Bypass Resulting in Memory Exhaustion

Modified: 5/14/2026

vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass

Modified: 6/12/2026

Sandbox bypass in vm2

Modified: 7/8/2026

vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes

Modified: 10/1/2026

vm2 allows a sandboxed plugin to execute native code through `node:sqlite`

Modified: 10/1/2026

vm2 is Vulnerable to Sandbox Breakout Through Promise Species

Modified: 6/12/2026

vm2 vulnerable to sandbox escape

Modified: 9/10/2026

vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted

Modified: 10/1/2026

vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process

Modified: 10/1/2026

vm2: Sandbox Escape (NodeVM)

Modified: 10/5/2026

vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution

Modified: 5/14/2026

vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE

Modified: 10/1/2026

vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape

Modified: 5/14/2026

vm2 NodeVM can replace the host process TLS trust store

Modified: 10/1/2026

vm2 has a Sandbox Escape

Modified: 2/3/2026

NodeVM observability builtins leak host process and HTTP request data

Modified: 6/12/2026

vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`

Modified: 5/14/2026

vm2 has Sandbox Breakout Through Null Proto Exception

Modified: 5/14/2026

vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package

Modified: 10/1/2026

vm2's Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain

Modified: 6/12/2026

vm2 Sandbox Escape vulnerability

Modified: 2/3/2026

vm2: Sandbox Breakout Using Dangerous Host Proto Mutators

Modified: 8/17/2026

vm2 Sandbox Escape vulnerability

Modified: 11/8/2023

vm2 has a NodeVM require.root bypass via symlink traversal that allows sandbox escape

Modified: 5/14/2026

vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM

Modified: 10/5/2026

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

Modified: 10/5/2026

VM2 Has a WASM Sandbox Escape

Modified: 6/22/2026

vm2 Sandbox Escape vulnerability

Modified: 7/8/2026

vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process

Modified: 10/5/2026

vm2's bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike

Modified: 8/17/2026

VM2 Sandbox Breakout Through __lookupGetter__

Modified: 5/8/2026

vm2 exposes host HTTPS credentials and TLS traffic through globalAgent

Modified: 10/1/2026

vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)

Modified: 5/14/2026

vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE

Modified: 10/5/2026

vm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks

Modified: 10/1/2026

vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

Modified: 10/1/2026

VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE

Modified: 8/17/2026

vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE

Modified: 7/8/2026

vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks

Modified: 6/12/2026

vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)

Modified: 9/18/2026

vm2 Host Promise Resolution Preserves Object Identity Across Sandbox Boundary

Modified: 5/14/2026

vm2 vulnerable to Sandbox Escape resulting in Remote Code Execution on host

Modified: 11/8/2023

vm2 vulnerable to Inspect Manipulation

Modified: 9/10/2026

vm2 contains a sandbox escape vulnerability

Modified: 10/7/2026

vm2 setup-sandbox.js violates Defense Invariant #11 in stack-trace formatter

Modified: 9/18/2026

vm2 has a Sandbox Escape Vulnerability

Modified: 5/14/2026

vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape

Modified: 10/1/2026

VM2 Has Sandbox Breakout Through Promise Species

Modified: 5/5/2026

vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack

Modified: 10/5/2026

vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)

Modified: 10/5/2026

NodeVM network builtin exclusions bypass via internal _http_client and _http_server

Modified: 6/12/2026

Prototype Pollution in vm2

Modified: 7/8/2026

NodeVM builtin denylist bypass via process and inspector/promises allows host code execution

Modified: 6/12/2026

vm2 is Vulnerable to Host File Path Disclosure via Stack Trace Information Leak

Modified: 5/14/2026

VM2 Has Sandbox Breakout Through Inspect Function

Modified: 5/5/2026

vm2 has a Sandbox Escape issue

Modified: 6/12/2026

vm2 has Memory Exhaustion DoS via bufferAllocLimit Bypass

Modified: 9/18/2026

vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape

Modified: 5/14/2026

vm2 before 3.6.11 vulnerable to sandbox escape

Modified: 9/10/2026

vm2 Sandbox Escape vulnerability

Modified: 9/10/2026

vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass

Modified: 10/5/2026

vm2's Transformer Fast-Path Bypass Exposes Internal State Variable

Modified: 5/14/2026

vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting

Modified: 10/5/2026

vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit

Modified: 10/5/2026

vm2 Sandbox Escape vulnerability

Modified: 11/8/2023