Skip to content
OpenAdvisories

Weakness (CWE)

CWE-913: Improper Control of Dynamically-Managed Code Resources

Class Incomplete

The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.

How to prevent it (2 mitigations)

  1. Implementation

    For any externally-influenced input, check the input against an allowlist of acceptable values.

  2. Implementation, Architecture and Design

    Refactor the code so that it does not need to be dynamically managed.

Source: MITRE CWE-913

All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-103663 Public exploit

    Path Traversal leading to Remote Code Execution in Ollama

    Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function. An unauthenticated remote attacker can specify a path traversal sequence as a layer digest, causing a malicious …

    Ollama Ollama
  • Critical 10.0
    CVE-2026-92956 Public exploit

    vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming

    vm2 versions 3.10.1 through 3.11.6 contain a sandbox escape reachable from a default `new VM()` sandbox when running on Node.js 26. WebAssembly.compileStreaming and WebAssembly.instantiateStreaming can produce a raw host-realm Promise that rejects with a host…

    patriksimek vm2 vm2 npm
  • Critical 9.0
    CVE-2026-92935 Public exploit

    vm2 NodeVM Remote Code Execution via Array-Shaped Require

    vm2 is a sandbox for running untrusted Node.js code. In versions >= 3.11.4 and <= 3.11.6, the NodeVM constructor computes `hasRealRequireConfig` with `typeof requireOpts === 'object' && requireOpts !== null`, so an array-shaped `require` value (for example `r…

    patriksimek vm2 vm2 npm
  • Critical 9.8
    CVE-2026-53753 Public exploit

    Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

    Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expression() function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object at…

    unclecode Crawl4AI crawl4ai PyPI
  • Critical 10.0
    CVE-2026-34156 Public exploit EPSS 35%

    NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node

    NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.28, NocoBase's Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allow…

    nocobase nocobase @nocobase/plugin-workflow-javascript npm
  • Critical 9.4
    CVE-2026-25049 Public exploit

    n8n Has an Expression Escape Vulnerability Leading to RCE

    n8n is an open source workflow automation platform. Prior to versions 1.123.17 and 2.5.2, an authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution…

    n8n-io n8n n8n npm
  • Critical 10.0
    CVE-2026-23830 Public exploit

    SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor

    SandboxJS is a JavaScript sandboxing library. Versions prior to 0.8.26 have a sandbox escape vulnerability due to `AsyncFunction` not being isolated in `SandboxFunction`. The library attempts to sandbox code execution by replacing the global `Function` constr…

    nyariv SandboxJS @nyariv/sandboxjs npm
  • Critical 9.7
    CVE-2025-66398 Public exploit EPSS 20%

    Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)

    Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.19.0, an unauthenticated attacker can pollute the internal state (`restoreFilePath`) of the server via the `/skServer/validateBackup` endpoint. This allows the at…

    SignalK signalk-server signalk-server npm
  • Critical 10.0
    CVE-2025-68613 Exploited Public exploit EPSS 99%

    n8n Vulnerable to Remote Code Execution via Expression Injection

    n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions…

    n8n-io n8n n8n npm
    KEV Mar 11, 2026
  • Critical 9.8
    CVE-2024-5452 Public exploit EPSS 27%

    RCE via Property/Class Pollution in lightning-ai/pytorch-lightning

    A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the `deepdiff` library. The library uses `deepdiff.Del…

    Lightning-AI lightning-ai/pytorch-lightning lightning pytorch-lightning PyPI
  • Critical 10.0
    CVE-2023-29017 Public exploit EPSS 63%

    vm2 Sandbox Escape vulnerability

    vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Prior to version 3.9.15, vm2 was not properly handling host objects passed to `Error.prepareStackTrace` in case of unhandled async errors. A threat actor could bypass the s…

    patriksimek vm2 vm2 npm
  • Critical 10.0
    CVE-2022-36067 Public exploit EPSS 48%

    vm2 vulnerable to Sandbox Escape before v3.9.11

    vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. In versions prior to version 3.9.11, a threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerabil…

    patriksimek vm2 vm2 npm