# vm2 (npm) vulnerabilities Source: https://junglewise.ai/threats/technologies/vm2 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/vm2.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 111 vulnerabilities in vm2 (npm): 0 in the last 7 days and 70 in the last 90 days, 60 of them critical and 0 exploited in the wild. The most recent, vm2 NodeVM path bypass in custom resolution, was published on 27 September 2026. Nothing in the last four weeks, down from 67 vulnerabilities in the four before. 0 critical against 40. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 70 - All time: 111 (60 critical, 0 exploited in the wild) ## About vm2 (npm) Node.js library that runs JavaScript code in an isolated virtual machine sandbox. ## Latest vm2 (npm) vulnerabilities - [vm2 NodeVM path bypass in custom resolution](https://junglewise.ai/threats/duplicate-advisory-vm2-nodevm-custom-resolution-bypasses-external-path-5d3a7272) (critical, CVSS 9, published 27 Sep 2026) - [vm2 NodeVM zlib buffer pool information disclosure](https://junglewise.ai/threats/duplicate-advisory-vm2-nodevm-zlib-buffers-expose-pooled-host-memory-6007c734) (high, CVSS 7.5, published 27 Sep 2026) - [vm2 host Promise rejection denial of service in construct trap](https://junglewise.ai/threats/duplicate-advisory-vm2-host-promise-rejection-from-an-exposed-f7aba6ba) (medium, CVSS 6.8, published 27 Sep 2026) - [CVE-2026-100723: vm2 sandbox escape via Buffer backing-store ownership bypass](https://junglewise.ai/threats/cve-2026-100723-vm2-before-3-12-2-does-not-apply-its-buffer-backing-store) (critical, CVSS 10, published 27 Sep 2026) - [CVE-2026-100722: vm2 unhandled Promise rejection in construct trap](https://junglewise.ai/threats/cve-2026-100722-vm2-before-3-12-2-does-not-apply-host-side-promise-rejection) (high, CVSS 8.6, published 27 Sep 2026) - [CVE-2026-100721: vm2 authorization bypass in NodeVM external-module resolver](https://junglewise.ai/threats/cve-2026-100721-vm2-before-3-12-2-contains-an-authorization-bypass-in-the-nodevm) (critical, CVSS 10, published 27 Sep 2026) - [vm2 NodeVM sandbox escape via child_process](https://junglewise.ai/threats/duplicate-advisory-vm2-contains-a-sandbox-escape-vulnerability-3d9d2178) (critical, CVSS 10, published 18 Sep 2026) - [CVE-2026-93606: vm2 sandbox escape via Promise Symbol.species hijack](https://junglewise.ai/threats/cve-2026-93606-vm2-sandbox-escape-via-promise-symbol-species-hijack) (critical, CVSS 10, published 18 Sep 2026) - [CVE-2026-93605: vm2 NodeVM sandbox escape via child_process denylist omission](https://junglewise.ai/threats/cve-2026-93605-vm2-nodevm-sandbox-escape-via-child-process-denylist-omission) (critical, CVSS 10, published 18 Sep 2026) - [CVE-2026-93604: vm2 sandbox escape via crypto.setFips exposure](https://junglewise.ai/threats/cve-2026-93604-vm2-sandbox-escape-via-crypto-setfips-exposure) (high, CVSS 7.2, published 18 Sep 2026) - [CVE-2026-93603: vm2 sandbox escape via nullish this receiver](https://junglewise.ai/threats/cve-2026-93603-vm2-sandbox-escape-via-nullish-this-receiver) (critical, CVSS 10, published 18 Sep 2026) - [vm2 NodeVM sandbox escape via prototype pollution](https://junglewise.ai/threats/duplicate-advisory-sandbox-escape-nodevm-d6fa5619) (critical, CVSS 10, published 17 Sep 2026) - [vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass](https://junglewise.ai/threats/duplicate-advisory-vm2-sandbox-escape-via-webassembly-compilestreaming-d9f7d88d) (critical, CVSS 10, published 17 Sep 2026) - [vm2 allowAsync bypass through Promise thenable assimilation](https://junglewise.ai/threats/duplicate-advisory-allowasync-false-can-be-bypassed-through-promise-9a81cfad) (high, CVSS 7.1, published 17 Sep 2026) - [vm2 sandbox bypass via accessor descriptor in freeze/readonly](https://junglewise.ai/threats/duplicate-advisory-vm2-vm-freeze-vm-readonly-bypass-via-accessor-c65e1fdb) (medium, CVSS 4, published 17 Sep 2026) - [vm2 CLI sandbox escape via require(__filename)](https://junglewise.ai/threats/duplicate-advisory-vm2-cli-provides-no-sandbox-isolation-host-realm-a5de364c) (high, CVSS 8.6, published 17 Sep 2026) - [vm2 Promise rejection denial of service](https://junglewise.ai/threats/duplicate-advisory-vm2-host-returned-promise-rejection-can-bypass-vm2-s-e131e247) (high, CVSS 8.6, published 17 Sep 2026) - [vm2 TypedArray and ArrayBuffer prototype mutation sandbox escape](https://junglewise.ai/threats/duplicate-advisory-default-vm-can-mutate-host-typedarray-and-5ed620b3) (critical, CVSS 10, published 17 Sep 2026) - [vm2 sandbox escape via incomplete symbol filtering](https://junglewise.ai/threats/duplicate-advisory-incomplete-nodejs-symbol-filtering-lets-sandbox-af639517) (medium, CVSS 6.8, published 17 Sep 2026) - [vm2 allowlist bypass via substring matching in module resolver](https://junglewise.ai/threats/duplicate-advisory-vm2-custom-module-resolver-can-bypass-the-external-16d7b5dc) (critical, CVSS 9.9, published 17 Sep 2026) - [vm2 NodeVM builtin deny-list bypass via node-prefixed specifiers](https://junglewise.ai/threats/duplicate-advisory-vm2-nodevm-node-prefixed-negative-builtin-deny-9c8ecaaa) (critical, CVSS 9.9, published 17 Sep 2026) - [vm2 NodeVM builtin denylist bypass via fs/promises](https://junglewise.ai/threats/duplicate-advisory-vm2-nodevm-builtin-denylist-bypass-via-fs-promises-d3a51a7c) (high, CVSS 8.5, published 17 Sep 2026) - [vm2 module allowlist bypass via prefix matching](https://junglewise.ai/threats/duplicate-advisory-external-module-allowlist-uses-a-raw-prefix-test-so-95e7475b) (medium, CVSS 4.2, published 17 Sep 2026) - [vm2 NodeVM builtin allowlist bypass sandbox escape](https://junglewise.ai/threats/duplicate-advisory-nodevm-builtin-allowlist-bypass-via-node-test-run-7e8a6e4e) (critical, CVSS 9.9, published 17 Sep 2026) - [vm2 NodeVM require.external RCE via unrestricted path traversal](https://junglewise.ai/threats/duplicate-advisory-nodevm-require-external-without-an-explicit-require-d0e93102) (critical, CVSS 10, published 17 Sep 2026) ## Most severe vm2 (npm) vulnerabilities - [CVE-2026-92937: vm2 sandbox escape in Promise rejection handling](https://junglewise.ai/threats/cve-2026-92937-vm2-sandbox-escape-in-promise-rejection-handling) (critical, CVSS 10, published 17 Sep 2026) - [CVE-2026-92946: vm2 remote code execution in NodeVM require.external](https://junglewise.ai/threats/cve-2026-92946-vm2-remote-code-execution-in-nodevm-require-external) (critical, CVSS 10, published 17 Sep 2026) - [CVE-2026-47208: patriksimek vm2 sandbox breakout via Promise species hijack](https://junglewise.ai/threats/cve-2026-47208-patriksimek-vm2-sandbox-breakout-via-promise-species-hijack) (critical, CVSS 10, published 12 Jun 2026) - [CVE-2026-44005: patriksimek vm2 sandbox escape via host prototype mutation](https://junglewise.ai/threats/cve-2026-44005-patriksimek-vm2-sandbox-escape-via-host-prototype-mutation) (critical, CVSS 10, published 13 May 2026) - [CVE-2026-47140: patriksimek vm2 sandbox escape via NodeVM builtin denylist bypass](https://junglewise.ai/threats/cve-2026-47140-patriksimek-vm2-sandbox-escape-via-nodevm-builtin-denylist-bypass) (critical, CVSS 10, published 12 Jun 2026) - [CVE-2026-44006: patriksimek vm2 sandbox escape via arbitrary prototype access](https://junglewise.ai/threats/cve-2026-44006-patriksimek-vm2-sandbox-escape-via-arbitrary-prototype-access) (critical, CVSS 10, published 13 May 2026) - [CVE-2026-43997: patriksimek vm2 sandbox escape via host object leakage](https://junglewise.ai/threats/cve-2026-43997-patriksimek-vm2-sandbox-escape-via-host-object-leakage) (critical, CVSS 10, published 13 May 2026) - [CVE-2026-93605: vm2 NodeVM sandbox escape via child_process denylist omission](https://junglewise.ai/threats/cve-2026-93605-vm2-nodevm-sandbox-escape-via-child-process-denylist-omission) (critical, CVSS 10, published 18 Sep 2026) - [CVE-2026-93603: vm2 sandbox escape via nullish this receiver](https://junglewise.ai/threats/cve-2026-93603-vm2-sandbox-escape-via-nullish-this-receiver) (critical, CVSS 10, published 18 Sep 2026) - [CVE-2026-93606: vm2 sandbox escape via Promise Symbol.species hijack](https://junglewise.ai/threats/cve-2026-93606-vm2-sandbox-escape-via-promise-symbol-species-hijack) (critical, CVSS 10, published 18 Sep 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 67 vulnerabilities in the four before. 0 critical against 40. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 3 | 2 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 61 | 37 | 0 | | 21 Sep 2026 | 6 | 3 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other npm technologies - [openclaw (npm)](https://junglewise.ai/threats/technologies/npm-openclaw): 214 vulnerabilities - [flowise (npm)](https://junglewise.ai/threats/technologies/flowise): 133 vulnerabilities - [parse-server (npm)](https://junglewise.ai/threats/technologies/parse-server): 117 vulnerabilities - [electron (npm)](https://junglewise.ai/threats/technologies/electron): 77 vulnerabilities - [ghost (npm)](https://junglewise.ai/threats/technologies/ghost): 74 vulnerabilities - [n8n (npm)](https://junglewise.ai/threats/technologies/npm-n8n): 64 vulnerabilities - [hono (npm)](https://junglewise.ai/threats/technologies/hono): 62 vulnerabilities - [directus (npm)](https://junglewise.ai/threats/technologies/directus): 61 vulnerabilities - [nocodb (npm)](https://junglewise.ai/threats/technologies/nocodb): 54 vulnerabilities - [undici (npm)](https://junglewise.ai/threats/technologies/undici): 53 vulnerabilities - [@budibase/server (npm)](https://junglewise.ai/threats/technologies/budibase-server): 42 vulnerabilities - [apostrophe (npm)](https://junglewise.ai/threats/technologies/apostrophe): 36 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "vm2 (npm) vulnerabilities", https://junglewise.ai/threats/technologies/vm2, 13 November 2026.