CVE-2026-92950 - vm2
The vm2 sandbox tool version before 3.11.7 lets a malicious script run on the main server when used from the command line. This bypasses the intended isolation and could let an attacker…

Too many irrelevant or confusing CVEs? Use stackflag.com

#vm2 #patriksimek #CVE #infosec

CVE-2026-92939 - vm2
The vm2 library version 3.11.3 through 3.11.6 lets code running inside its sandbox call a cryptography function that can load a native library from a file path. An attacker who can…

Too many irrelevant or confusing CVEs? Use stackflag.com

#vm2 #patriksimek #CVE #infosec

CVE-2026-92934 - vm2
The vm2 JavaScript sandbox library, versions earlier than 3.11.8, can be tricked into letting malicious code break out of its isolated environment. This could let an attacker run…

Too many irrelevant or confusing CVEs? Use stackflag.com

#vm2 #patriksimek #CVE #infosec