Skip to content
OpenAdvisories

Weakness (CWE)

CWE-237: Improper Handling of Structural Elements

Base Incomplete

The product does not handle or incorrectly handles inputs that are related to complex structures.

Source: MITRE CWE-237

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-45411

    vm2: Sandbox Breakout Using Async Generator

    vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a host exception using the yield* expression inside an async generator. When the generator is closed using the return function, the value is awaited on and exceptions throw…

    patriksimek vm2 vm2 npm