Skip to content
OpenAdvisories

Package · npm

vm2

78 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.1
    CVE-2026-92962

    vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js

    vm2 is a sandbox for running untrusted JavaScript. In vm2 versions up to and including 3.11.3, the defaultSandboxPrepareStackTrace function in lib/setup-sandbox.js builds its output array using prototype-walking index assignment (lines[lines.length] = value) …

    patriksimek vm2 vm2 npm