Iniciar sesión
Deutsch English Español Polski
Media

vm2 has access to `VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL`

  • Publicada: 08.05.2026
  • Actualizado: 11.10.2026 10:22

Summary

https://github.com/patriksimek/vm2/security/advisories/GHSA-wp5r-2gw5-m7q7 is not fully patched.

Details

It is still possible to get access to VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL.

PoC

js
const {VM} = require("vm2");
const vm = new VM();
console.log(vm.run(`
 globalThis['VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL']
`));

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

PlataformaPaqueteVersiones vulnerablesCorregida en
Paquete de npm vm2 < 3.11.2 3.11.2

Referencias

Puntuación CVSS 5.3/10
Vector CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Debilidad (CWE)
CWE-693
Plataforma
npm
Paquete
vm2
Publicada
08.05.2026
Actualizado
11.10.2026 10:22

Fuentes y licencias

OSV / GitHub Advisory Database - GHSA-2cm2-m3w5-gp2f - CC BY 4.0

Historial de vulnerabilidades: vm2

Todas las vulnerabilidades publicadas de este paquete (Paquete de npm), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (78) en el archivo
Entradas en total
78
Primera → última
10.2021 10.2026
Sin corrección
1
Explotada en ataques
0

Distribución por gravedad

  • Crítica 51
  • Alta 14
  • Media 12
  • Baja 1

Divulgaciones por año

Gravedad:
  1. vm2 contains a sandbox escape vulnerability
    Crítica · 10.0 CVE-2026-93605 < 3.12.1 3.12.1
  2. vm2: NodeVM custom resolution bypasses external path boundaries
    Crítica · 10.0 CVE-2026-100721 < 3.12.2 3.12.2
  3. vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process
    Alta · 8.6 CVE-2026-100722 < 3.12.2 3.12.2
  4. vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM
    Alta · 7.1 CVE-2026-92959 < 3.11.8 3.11.8
  5. vm2: Sandbox Escape (NodeVM)
    Crítica · 10.0 CVE-2026-92955 < 3.11.8 3.11.8
  6. vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process
    Crítica · 8.6 CVE-2026-92954 >= 3.10.0, < 3.11.8 3.11.8
  7. vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix
    Crítica · 10.0 CVE-2026-92953 >= 3.11.0, < 3.11.8 3.11.8
  8. vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit
    Crítica · 9.0 CVE-2026-92934 < 3.11.8 3.11.8
  9. vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)
    Alta · 7.5 CVE-2026-92942 < 3.11.7 3.11.7
  10. vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE
    Crítica · 10.0 CVE-2026-92946 < 3.11.7 3.11.7
  11. vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool
    Crítica · 10.0 CVE-2026-92947 < 3.11.7 3.11.7
  12. vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass
    Crítica · 10.0 CVE-2026-92956 >= 3.10.1, < 3.11.7 3.11.7
  13. vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape
    Crítica · 9.9 CVE-2026-92948 >= 3.9.6, < 3.11.7 3.11.7
  14. vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts
    Alta · 8.6 CVE-2026-92950 < 3.11.7 3.11.7
  15. vm2 exposes host HTTPS credentials and TLS traffic through globalAgent
    Crítica · 10.0 CVE-2026-92940 >= 3.11.3, < 3.11.7 3.11.7
  16. vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package
    Crítica · 9.9 CVE-2026-92951 < 3.11.7 3.11.7
  17. vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes
    Alta · 8.5 CVE-2026-92958 < 3.11.7 3.11.7
  18. vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process
    Crítica · 9.9 CVE-2026-92957 < 3.11.7 3.11.7
  19. vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE
    Crítica · 9.0 CVE-2026-92935 >= 3.11.4, < 3.11.7 3.11.7
  20. vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection
    Crítica · 10.0 CVE-2026-92937 >= 3.11.6, < 3.11.7 3.11.7
  21. vm2 allows a sandboxed plugin to execute native code through `node:sqlite`
    Crítica · 9.9 CVE-2026-92938 >= 3.11.3, < 3.11.7 3.11.7
  22. vm2 crypto builtin loads attacker native code through setEngine
    Crítica · 9.9 CVE-2026-92939 >= 3.11.3, < 3.11.7 3.11.7
  23. vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector
    Crítica · 9.8 CVE-2026-92944 >= 3.10.2, < 3.11.7 3.11.7
  24. vm2 NodeVM can replace the host process TLS trust store
    Crítica · 10.0 CVE-2026-92941 >= 3.11.3, < 3.11.7 3.11.7
  25. vm2 has Memory Exhaustion DoS via bufferAllocLimit Bypass
    Alta · 7.5 CVE-2026-92961 < 3.11.6 3.11.6
  26. vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f)
    Crítica · 10.0 CVE-2026-92960 < 3.11.6 3.11.6
  27. vm2: Sandbox Breakout Using Dangerous Host Proto Mutators
    Crítica · 9.8 CVE-2026-47698 < 3.11.6 3.11.6
  28. VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE
    Crítica · 9.9 CVE-2026-47686 < 3.11.6 3.11.6
  29. vm2's bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike
    Alta CVE-2026-47683 < 3.11.6 3.11.6
  30. NodeVM network builtin exclusions bypass via internal _http_client and _http_server
    Alta · 8.6 CVE-2026-47139 < 3.11.4 3.11.4
  31. NodeVM builtin denylist bypass via process and inspector/promises allows host code execution
    Crítica · 10.0 CVE-2026-47140 < 3.11.4 3.11.4
  32. vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass
    Crítica · 9.8 CVE-2026-47210 < 3.11.4 3.11.4
  33. vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE
    Crítica · 10.0 CVE-2026-47137 < 3.11.4 3.11.4
  34. vm2's Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain
    Alta · 8.6 CVE-2026-47209 < 3.11.4 3.11.4
  35. vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks
    Alta · 8.7 CVE-2026-47135 < 3.11.4 3.11.4
  36. vm2 is Vulnerable to Sandbox Breakout Through Promise Species
    Crítica · 10.0 CVE-2026-47208 < 3.11.4 3.11.4
  37. vm2 has a Sandbox Escape issue
    Crítica · 10.0 CVE-2026-47131 < 3.11.4 3.11.4
  38. vm2 Has a Sandbox Breakout Using Async Generator
    Crítica · 9.8 CVE-2026-45411 < 3.11.3 3.11.3
  39. vm2 has access to `VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL` esta entrada
    Media · 5.3 CVE-2026-92963 < 3.11.2 3.11.2
  40. vm2 has Sandbox Breakout Through Null Proto Exception
    Crítica · 9.8 CVE-2026-44009 < 3.11.2 3.11.2
  41. vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`
    Crítica · 9.8 CVE-2026-44008 < 3.11.2 3.11.2
  42. vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution
    Crítica · 9.1 CVE-2026-44007 < 3.11.1 3.11.1
  43. vm2 has a NodeVM require.root bypass via symlink traversal that allows sandbox escape
    Alta · 8.5 CVE-2026-43998 >= 3.10.5, < 3.11.0 3.11.0
  44. vm2 Sandbox Access to Host Buffer.alloc Allows timeout Bypass Resulting in Memory Exhaustion
    Alta · 7.5 CVE-2026-44004 < 3.11.0 3.11.0
  45. vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)
    Alta · 8.6 CVE-2026-44001 < 3.11.0 3.11.0
  46. vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape
    Crítica · 9.9 CVE-2026-43999 >= 3.10.5, < 3.11.0 3.11.0
  47. vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape
    Crítica · 10.0 CVE-2026-44005 >= 3.9.6, < 3.11.0 3.11.0
  48. vm2 Access to Host Object Enables Sandbox Escape
    Crítica · 10.0 CVE-2026-43997 < 3.11.0 3.11.0
  49. vm2 has a Sandbox Escape Vulnerability
    Crítica · 10.0 CVE-2026-44006 < 3.11.0 3.11.0
  50. VM2 Has a WASM Sandbox Escape
    Crítica · 9.8 CVE-2026-26956 < 3.10.5 3.10.5
  51. VM2 Has a Sandbox Escape Issue via SuppressedError
    Crítica · 9.8 CVE-2026-26332 < 3.11.0 3.11.0
  52. VM2 Has Sandbox Breakout Through Inspect Function
    Crítica · 9.8 CVE-2026-24781 < 3.11.0 3.11.0
  53. VM2 Has Sandbox Breakout Through Promise Species
    Crítica · 9.8 CVE-2026-24120 < 3.10.5 3.10.5
  54. VM2 Sandbox Breakout Through __lookupGetter__
    Crítica · 9.8 CVE-2026-24118 < 3.11.0 3.11.0
  55. vm2 has a Sandbox Escape
    Crítica · 9.8 CVE-2026-22709 < 3.10.2 3.10.2
  56. vm2 Sandbox Escape vulnerability
    Crítica · 9.8 CVE-2023-37466 < 3.10.0 3.10.0
  57. vm2 Sandbox Escape vulnerability
    Crítica · 9.8 CVE-2023-37903 <= 3.9.19 sin corrección
  58. vm2 Sandbox Escape vulnerability
    Crítica · 9.8 CVE-2023-32314 < 3.9.18 3.9.18
  59. vm2 Sandbox Escape vulnerability
    Crítica · 9.8 CVE-2023-30547 < 3.9.17 3.9.17
  60. vm2 Sandbox Escape vulnerability
    Crítica · 9.8 CVE-2023-29199 < 3.9.16 3.9.16
Mostrar más (6) Mostrando 60 de 66

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación
Newsletter DockRay

La seguridad de tus aplicaciones en tu correo

Vulnerabilidades importantes, recomendaciones concretas y consejos prácticos para tus aplicaciones. Elige tus tecnologías y sigue lo que importa para tu proyecto.

  • Un resumen diario de nuevas vulnerabilidades, también las críticas.
  • Avisos sobre actualizaciones importantes.
  • Consejos prácticos sobre seguridad y monitorización de aplicaciones.

Déjalo vacío para recibir avisos de todas las tecnologías.

Política de privacidad

Suscripción gratuita. Date de baja con un clic en cualquier correo.