@stackflag.bsky.socialCVE-2026-33937 - handlebars
The Handlebars library used in several packages can be tricked into running unwanted code. This affects the listed Handlebars implementations and could let attackers affect…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-12866 - expr-eval
The expr-eval package used in several JavaScript projects contains a flaw that could let an attacker run unwanted code on your system. This affects the expr-eval library and…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2022-25893 - vm2
Versions of the vm2 package earlier than 3.9.10 can be tricked into executing any code the attacker wants, breaking the isolation it provides. This could let a malicious user gain access…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2023-29017 - vm2
Versions of vm2 before 3.9.15 do not correctly handle certain error objects, allowing a malicious script to break out of the sandbox. This could let an attacker execute commands on the…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-43999 - vm2
The vm2 library used in several GitHub repositories could let a malicious user run code they shouldn't be able to. This creates a risk that an attacker could take control of your system…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2023-36665 - protobufjs
If an attacker can control the data used to parse or load Protobuf files, they may be able to alter the behavior of JavaScript code by adding or changing functions. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2024-21508 - mysql2
The mysql2 code library used in Node.js applications can be tricked into running malicious commands. This could let an attacker take control of the system that uses the library.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2023-37466 - vm2
vm2, a Node.js library, has critical security issues that could let hackers run unauthorized code. This could happen if you're using an outdated version of vm2. Update to version…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-22709 - vm2
An attacker can escape the sandbox and run arbitrary code on a server running an out-of-date version of vm2 for Node.js. This could allow unauthorized access or data theft. Update to…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2023-37903 - vm2
A vulnerability in the Node.js vm2 sandbox allows attackers to break out of the sandbox and run malicious code. This could give an attacker complete control over your system. There…
Too many irrelevant or confusing CVEs? Use stackflag.com