#cwe-1100

共收录 2 条相关情报。

← 返回所有主题

漏洞预警2026-05-13 发布CRITICAL

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with objects from the other side but can call into this side via ...

CVE-2026-44008

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with obj

来源摘录 · NVD

#cve #cwe-1100 #cwe-668

漏洞预警2026-05-13 发布CRITICAL

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created with nesting: true, sandbox code can unconditionally require('vm2') regardless of the out...

CVE-2026-44007

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created with nesting: true, sandbox code

来源摘录 · NVD

#cve #cwe-1100 #cwe-284