{"schema_version":1,"title":"Vm2 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 14 vulnerabilities in Vm2: 0 in the last 7 days and 14 in the last 90 days, 7 of them critical and 0 exploited in the wild. The most recent, vm2 NodeVM zlib buffer pool information disclosure, was published on 27 September 2026. Nothing in the last four weeks, down from 14 vulnerabilities in the four before. 0 critical against 7.","url":"https://junglewise.ai/threats/technologies/x-vm2","json_url":"https://junglewise.ai/threats/technologies/x-vm2.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/x-vm2","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":4,"all_time":14,"critical":7,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":14,"last_365_days":14},"latest":[{"cvss":7.5,"slug":"duplicate-advisory-vm2-nodevm-zlib-buffers-expose-pooled-host-memory-6007c734","title":"vm2 NodeVM zlib buffer pool information disclosure","severity":"high","exploited":false,"published_at":"2026-09-27T03:31:03+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-nodevm-zlib-buffers-expose-pooled-host-memory-6007c734"},{"cvss":6.8,"slug":"duplicate-advisory-vm2-host-promise-rejection-from-an-exposed-f7aba6ba","title":"vm2 host Promise rejection denial of service in construct trap","severity":"medium","exploited":false,"published_at":"2026-09-27T03:31:03+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-host-promise-rejection-from-an-exposed-f7aba6ba"},{"cve":"CVE-2026-100722","cvss":8.6,"epss":0.0026,"slug":"cve-2026-100722-vm2-before-3-12-2-does-not-apply-host-side-promise-rejection","title":"vm2 unhandled Promise rejection in construct trap","severity":"high","exploited":false,"published_at":"2026-09-27T02:17:18.817+00:00","url":"https://junglewise.ai/threats/cve-2026-100722-vm2-before-3-12-2-does-not-apply-host-side-promise-rejection"},{"cvss":10,"slug":"duplicate-advisory-default-vm-can-mutate-host-typedarray-and-5ed620b3","title":"vm2 TypedArray and ArrayBuffer prototype mutation sandbox escape","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:16+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-default-vm-can-mutate-host-typedarray-and-5ed620b3"},{"cvss":6.8,"slug":"duplicate-advisory-incomplete-nodejs-symbol-filtering-lets-sandbox-af639517","title":"vm2 sandbox escape via incomplete symbol filtering","severity":"medium","exploited":false,"published_at":"2026-09-17T15:32:16+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-incomplete-nodejs-symbol-filtering-lets-sandbox-af639517"},{"cvss":7.1,"slug":"duplicate-advisory-allowasync-false-can-be-bypassed-through-promise-9a81cfad","title":"vm2 allowAsync bypass through Promise thenable assimilation","severity":"high","exploited":false,"published_at":"2026-09-17T15:32:16+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-allowasync-false-can-be-bypassed-through-promise-9a81cfad"},{"cvss":9.9,"slug":"duplicate-advisory-vm2-custom-module-resolver-can-bypass-the-external-16d7b5dc","title":"vm2 allowlist bypass via substring matching in module resolver","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:16+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-custom-module-resolver-can-bypass-the-external-16d7b5dc"},{"cvss":4,"slug":"duplicate-advisory-vm2-vm-freeze-vm-readonly-bypass-via-accessor-c65e1fdb","title":"vm2 sandbox bypass via accessor descriptor in freeze/readonly","severity":"medium","exploited":false,"published_at":"2026-09-17T15:32:16+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-vm-freeze-vm-readonly-bypass-via-accessor-c65e1fdb"},{"cvss":9.9,"slug":"duplicate-advisory-vm2-crypto-builtin-loads-attacker-native-code-fea6866a","title":"vm2 sandbox escape via crypto.setEngine native code loading","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:14+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-crypto-builtin-loads-attacker-native-code-fea6866a"},{"cvss":9.9,"slug":"duplicate-advisory-vm2-3-11-6-allows-a-sandboxed-plugin-to-execute-150de57a","title":"vm2 sandbox escape via node:sqlite module exposure","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:14+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-3-11-6-allows-a-sandboxed-plugin-to-execute-150de57a"},{"cvss":7.5,"slug":"duplicate-advisory-vm2-timeout-option-bypass-via-finalizationregistry-19556987","title":"vm2 timeout option bypass via FinalizationRegistry cleanup callback","severity":"high","exploited":false,"published_at":"2026-09-17T15:32:14+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-timeout-option-bypass-via-finalizationregistry-19556987"},{"cvss":9,"slug":"duplicate-advisory-vm2-sandbox-escape-to-host-rce-via-revisited-host-b28aa992","title":"vm2 sandbox escape to RCE via AggregateError Error.cause sanitization bypass","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:14+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-sandbox-escape-to-host-rce-via-revisited-host-b28aa992"},{"cvss":9,"slug":"duplicate-advisory-nodevm-nesting-guard-accepts-array-shaped-require-e4adbb8b","title":"vm2 NodeVM nesting guard bypass permits host RCE","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:14+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-nodevm-nesting-guard-accepts-array-shaped-require-e4adbb8b"},{"cvss":9.8,"slug":"duplicate-advisory-vm2-sandbox-escape-on-node-js-26-through-a-stale-0ecbfabc","title":"vm2 sandbox escape on Node.js 26 through stale PromiseThenLookupChain","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:14+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-sandbox-escape-on-node-js-26-through-a-stale-0ecbfabc"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":7,"exploited":0,"vulnerabilities":11},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Vm2","slug":"x-vm2","aliases":[],"category":"library","description":"JavaScript runtime library that executes code in a sandboxed environment.","url":"https://junglewise.ai/threats/technologies/x-vm2"},"most_severe":[{"cvss":10,"slug":"duplicate-advisory-default-vm-can-mutate-host-typedarray-and-5ed620b3","title":"vm2 TypedArray and ArrayBuffer prototype mutation sandbox escape","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:16+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-default-vm-can-mutate-host-typedarray-and-5ed620b3"},{"cvss":9.9,"slug":"duplicate-advisory-vm2-custom-module-resolver-can-bypass-the-external-16d7b5dc","title":"vm2 allowlist bypass via substring matching in module resolver","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:16+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-custom-module-resolver-can-bypass-the-external-16d7b5dc"},{"cvss":9.9,"slug":"duplicate-advisory-vm2-3-11-6-allows-a-sandboxed-plugin-to-execute-150de57a","title":"vm2 sandbox escape via node:sqlite module exposure","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:14+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-3-11-6-allows-a-sandboxed-plugin-to-execute-150de57a"},{"cvss":9.9,"slug":"duplicate-advisory-vm2-crypto-builtin-loads-attacker-native-code-fea6866a","title":"vm2 sandbox escape via crypto.setEngine native code loading","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:14+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-crypto-builtin-loads-attacker-native-code-fea6866a"},{"cvss":9.8,"slug":"duplicate-advisory-vm2-sandbox-escape-on-node-js-26-through-a-stale-0ecbfabc","title":"vm2 sandbox escape on Node.js 26 through stale PromiseThenLookupChain","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:14+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-sandbox-escape-on-node-js-26-through-a-stale-0ecbfabc"},{"cvss":9,"slug":"duplicate-advisory-vm2-sandbox-escape-to-host-rce-via-revisited-host-b28aa992","title":"vm2 sandbox escape to RCE via AggregateError Error.cause sanitization bypass","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:14+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-sandbox-escape-to-host-rce-via-revisited-host-b28aa992"},{"cvss":9,"slug":"duplicate-advisory-nodevm-nesting-guard-accepts-array-shaped-require-e4adbb8b","title":"vm2 NodeVM nesting guard bypass permits host RCE","severity":"critical","exploited":false,"published_at":"2026-09-17T15:32:14+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-nodevm-nesting-guard-accepts-array-shaped-require-e4adbb8b"},{"cve":"CVE-2026-100722","cvss":8.6,"epss":0.0026,"slug":"cve-2026-100722-vm2-before-3-12-2-does-not-apply-host-side-promise-rejection","title":"vm2 unhandled Promise rejection in construct trap","severity":"high","exploited":false,"published_at":"2026-09-27T02:17:18.817+00:00","url":"https://junglewise.ai/threats/cve-2026-100722-vm2-before-3-12-2-does-not-apply-host-side-promise-rejection"},{"cvss":7.5,"slug":"duplicate-advisory-vm2-nodevm-zlib-buffers-expose-pooled-host-memory-6007c734","title":"vm2 NodeVM zlib buffer pool information disclosure","severity":"high","exploited":false,"published_at":"2026-09-27T03:31:03+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-nodevm-zlib-buffers-expose-pooled-host-memory-6007c734"},{"cvss":7.5,"slug":"duplicate-advisory-vm2-timeout-option-bypass-via-finalizationregistry-19556987","title":"vm2 timeout option bypass via FinalizationRegistry cleanup callback","severity":"high","exploited":false,"published_at":"2026-09-17T15:32:14+00:00","url":"https://junglewise.ai/threats/duplicate-advisory-vm2-timeout-option-bypass-via-finalizationregistry-19556987"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}