Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 89
Reset filtersvm2 Has a Sandbox Breakout Using Async Generator
vm2 has access to `VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL`
vm2 has Sandbox Breakout Through Null Proto Exception
vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`
vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution
vm2 has a NodeVM require.root bypass via symlink traversal that allows sandbox escape
vm2's Transformer Fast-Path Bypass Exposes Internal State Variable
vm2 is Vulnerable to Host File Path Disclosure via Stack Trace Information Leak
vm2 Host Promise Resolution Preserves Object Identity Across Sandbox Boundary
vm2 Sandbox Access to Host Buffer.alloc Allows timeout Bypass Resulting in Memory Exhaustion
vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)
vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape
vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape
vm2 Access to Host Object Enables Sandbox Escape
vm2 has a Sandbox Escape Vulnerability
VM2 Has a WASM Sandbox Escape
VM2 Has a Sandbox Escape Issue via SuppressedError
VM2 Has Sandbox Breakout Through Inspect Function
VM2 Has Sandbox Breakout Through Promise Species
VM2 Sandbox Breakout Through __lookupGetter__
vm2 has a Sandbox Escape
Flowise OverrideConfig security vulnerability
@hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCE
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.