Start for Free
npm

vm2

View on npm registry
100 Total advisories
100 Vulnerabilities
0 Malware

Dependency scanning

Check whether vm2 is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

CRITICAL 9.8
npm

CVE-2026-44009

vm2 has Sandbox Breakout Through Null Proto Exception
CRITICAL 9.8
npm

CVE-2026-26332

VM2 Has a Sandbox Escape Issue via SuppressedError
CRITICAL 9.8
npm

CVE-2026-44008

vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`
CRITICAL 9.8
npm

CVE-2026-24118

VM2 Sandbox Breakout Through __lookupGetter__
CRITICAL 9.8
npm

CVE-2026-24781

VM2 Has Sandbox Breakout Through Inspect Function
CRITICAL 9.1
npm

CVE-2026-44007

vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution
CRITICAL 10.0
npm

CVE-2026-93605

vm2 contains a sandbox escape vulnerability
CRITICAL 10.0
npm

GHSA-9hxx-m5g2-2q3h

Duplicate Advisory: vm2 contains a sandbox escape vulnerability
HIGH 8.6
npm

CVE-2026-100722

vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process
CRITICAL 10.0
npm

CVE-2026-100721

vm2: NodeVM custom resolution bypasses external path boundaries
MEDIUM 6.8
npm

GHSA-7rr2-8fr3-fjqx

Duplicate Advisory: vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process
CRITICAL 9.0
npm

GHSA-c9wr-qm7p-p6vc

Duplicate Advisory: vm2: NodeVM custom resolution bypasses external path boundaries
CRITICAL 10.0
npm

CVE-2026-100723

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary
HIGH 7.5
npm

GHSA-43rv-jrfh-9mrr

Duplicate Advisory: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary
CRITICAL 10.0
npm

CVE-2026-92953

vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix
HIGH 8.6
npm

CVE-2026-92954

vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process
HIGH 7.1
npm

GHSA-9538-79j2-h62h

Duplicate Advisory: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM
CRITICAL 10.0
npm

GHSA-gg6f-mhqm-f7gp

Duplicate Advisory: Sandbox Escape (NodeVM)
HIGH 8.6
npm

GHSA-mgj2-jqjq-q8gg

Duplicate Advisory: vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process
CRITICAL 10.0
npm

CVE-2026-92955

vm2: Sandbox Escape (NodeVM)
CRITICAL 10.0
npm

GHSA-5v7w-95g5-pj6q

Duplicate Advisory: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix
HIGH 7.1
npm

CVE-2026-92959

vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM
MEDIUM 5.8
npm

CVE-2026-92933

vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack
MEDIUM 5.8
npm

GHSA-63m2-qqch-jxv2

Duplicate Advisory: vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting
CRITICAL 9.0
npm

CVE-2026-92934

vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit
MEDIUM 5.8
npm

CVE-2026-92936

vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting
HIGH 7.5
npm

GHSA-vjcv-9j33-wj62

Duplicate Advisory: vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)
CRITICAL 10.0
npm

GHSA-538q-xxpg-6h4r

Duplicate Advisory: vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass
CRITICAL 10.0
npm

GHSA-29x6-9qh5-83gg

Duplicate Advisory: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE
CRITICAL 10.0
npm

GHSA-x5qg-8pq6-39h6

Duplicate Advisory: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool
CRITICAL 10.0
npm

CVE-2026-92947

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool
CRITICAL 9.0
npm

GHSA-4xmw-hh9q-4q7c

Duplicate Advisory: vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit
CRITICAL 10.0
npm

CVE-2026-92946

vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE
HIGH 7.5
npm

CVE-2026-92942

vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)
CRITICAL 10.0
npm

CVE-2026-92956

vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass
MEDIUM 5.8
npm

GHSA-2vh9-cv26-p97m

Duplicate Advisory: vm2: util.getCallSites() bypasses GHSA-v27g host-frame redaction, leaks host call stack
MEDIUM 6.8
npm

CVE-2026-92952

vm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks
CRITICAL 9.9
npm

CVE-2026-92948

vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape
HIGH 8.6
npm

CVE-2026-92950

vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts
MEDIUM 6.8
npm

GHSA-hmpr-c9rf-qcrf

Duplicate Advisory: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks
CRITICAL 9.9
npm

GHSA-wqg3-r97q-73xm

Duplicate Advisory: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape
MEDIUM 4.0
npm

CVE-2026-92949

vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor
HIGH 8.6
npm

GHSA-hc6q-4vvg-jf79

Duplicate Advisory: vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts
CRITICAL 9.0
npm

GHSA-9fxx-mv6c-j5xp

Duplicate Advisory: NodeVM nesting guard accepts array-shaped require and permits host RCE
MEDIUM 4.0
npm

GHSA-9f3g-34x8-92jc

Duplicate Advisory: vm2: vm.freeze()/vm.readonly() bypass via accessor descriptor
CRITICAL 9.9
npm

CVE-2026-92938

vm2 allows a sandboxed plugin to execute native code through `node:sqlite`
CRITICAL 10.0
npm

CVE-2026-92937

vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection
CRITICAL 9.8
npm

GHSA-hwr5-cm8v-c76q

Duplicate Advisory: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector
CRITICAL 9.9
npm

GHSA-6jgm-4w45-vh8j

Duplicate Advisory: vm2 crypto builtin loads attacker native code through setEngine
CRITICAL 9.9
npm

GHSA-m7cq-7f2q-f9fh

Duplicate Advisory: vm2 3.11.6 allows a sandboxed plugin to execute native code through `node:sqlite`
HIGH 8.5
npm

CVE-2026-92958

vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes
CRITICAL 10.0
npm

CVE-2026-92941

vm2 NodeVM can replace the host process TLS trust store
CRITICAL 10.0
npm

GHSA-5843-9mh5-hhgw

Duplicate Advisory: vm2 exposes host HTTPS credentials and TLS traffic through globalAgent
CRITICAL 9.0
npm

CVE-2026-92935

vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE
CRITICAL 9.8
npm

CVE-2026-92944

vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector
CRITICAL 9.9
npm

CVE-2026-92951

vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package
MEDIUM 4.2
npm

CVE-2026-92945

vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted
CRITICAL 9.9
npm

GHSA-28q4-xrqh-9479

Duplicate Advisory: vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process
CRITICAL 10.0
npm

GHSA-3f84-vwv5-r42g

Duplicate Advisory: vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection
CRITICAL 10.0
npm

GHSA-xq74-c7jx-8w5j

Duplicate Advisory: vm2 NodeVM can replace the host process TLS trust store
CRITICAL 9.9
npm

CVE-2026-92939

vm2 crypto builtin loads attacker native code through setEngine
CRITICAL 10.0
npm

CVE-2026-92940

vm2 exposes host HTTPS credentials and TLS traffic through globalAgent
CRITICAL 9.9
npm

CVE-2026-92957

vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process
HIGH 8.5
npm

GHSA-7c3p-84r8-h79q

Duplicate Advisory: vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes
CRITICAL 9.9
npm

GHSA-6fvh-fgmg-3x7v

Duplicate Advisory: vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package
MEDIUM 4.2
npm

GHSA-8mvv-mcc3-xwhh

Duplicate Advisory: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted
MEDIUM 5.3
npm

CVE-2026-92963

vm2 has access to `VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL`
HIGH 7.5
npm

CVE-2026-92961

vm2 has Memory Exhaustion DoS via bufferAllocLimit Bypass
UNKNOWN
npm

CVE-2026-92962

vm2 setup-sandbox.js violates Defense Invariant #11 in stack-trace formatter
CRITICAL 10.0
npm

CVE-2026-92960

vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)
CRITICAL 9.8
npm

CVE-2023-32314

vm2 Sandbox Escape vulnerability
MEDIUM 5.3
npm

CVE-2023-32313

vm2 vulnerable to Inspect Manipulation
CRITICAL 9.8
npm

CVE-2023-29017

vm2 vulnerable to sandbox escape
HIGH 8.3
npm

CVE-2019-10761

vm2 before 3.6.11 vulnerable to sandbox escape
UNKNOWN
npm

CVE-2026-47683

vm2's bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike
CRITICAL 9.9
npm

CVE-2026-47686

VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE
CRITICAL 9.8
npm

CVE-2026-47698

vm2: Sandbox Breakout Using Dangerous Host Proto Mutators
CRITICAL 10.0
npm

CVE-2026-47137

vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE
CRITICAL 9.8
npm

CVE-2023-37903

vm2 Sandbox Escape vulnerability
CRITICAL 9.8
npm

CVE-2021-23555

Sandbox bypass in vm2
CRITICAL 9.8
npm

CVE-2021-23449

Prototype Pollution in vm2
CRITICAL 9.8
npm

CVE-2026-26956

VM2 Has a WASM Sandbox Escape
CRITICAL 10.0
npm

CVE-2026-47140

NodeVM builtin denylist bypass via process and inspector/promises allows host code execution
CRITICAL 10.0
npm

CVE-2026-47131

vm2 has a Sandbox Escape issue
CRITICAL 9.8
npm

CVE-2026-47210

vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass
CRITICAL 10.0
npm

CVE-2026-47208

vm2 is Vulnerable to Sandbox Breakout Through Promise Species
HIGH 8.6
npm

CVE-2026-47209

vm2's Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain
HIGH 8.7
npm

CVE-2026-47135

vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks
HIGH 8.6
npm

CVE-2026-47139

NodeVM network builtin exclusions bypass via internal _http_client and _http_server
UNKNOWN
npm

CVE-2026-47141

NodeVM observability builtins leak host process and HTTP request data
CRITICAL 9.8
npm

CVE-2026-45411

vm2 Has a Sandbox Breakout Using Async Generator
MEDIUM 5.8
npm

CVE-2026-44002

vm2 is Vulnerable to Host File Path Disclosure via Stack Trace Information Leak
MEDIUM 5.3
npm

CVE-2026-44003

vm2's Transformer Fast-Path Bypass Exposes Internal State Variable
CRITICAL 10.0
npm

CVE-2026-44006

vm2 has a Sandbox Escape Vulnerability
HIGH 8.6
npm

CVE-2026-44001

vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)
CRITICAL 10.0
npm

CVE-2026-44005

vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape
MEDIUM 6.5
npm

CVE-2026-44000

vm2 Host Promise Resolution Preserves Object Identity Across Sandbox Boundary
HIGH 8.5
npm

CVE-2026-43998

vm2 has a NodeVM require.root bypass via symlink traversal that allows sandbox escape
CRITICAL 9.9
npm

CVE-2026-43999

vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape
HIGH 7.5
npm

CVE-2026-44004

vm2 Sandbox Access to Host Buffer.alloc Allows timeout Bypass Resulting in Memory Exhaustion

Browse more npm advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes