VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE
CVE-2026-47686
**Affected:** vm2 { throw new Error('fail', { cause: process }); } } }); const result = vm.run
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter...
CVE-2026-74790
Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused T
Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset()...
CVE-2026-74791
Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cach
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that...
CVE-2026-73061
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code t
SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication...
CVE-2026-73056
SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability i
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5...
CVE-2026-74251
Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (a
The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable...
CVE-2024-13784
The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to PHP Object Injection
The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data...
CVE-2026-18316
The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capab
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in...
CVE-2026-18432
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and i
The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all...
CVE-2026-16098
The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and includi
The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to...
CVE-2026-14524
The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path va
Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When...
CVE-2026-74764
Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted
SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji...
CVE-2026-73053
SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that fails to s
SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select...
CVE-2026-73050
SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select options, allowing stor
SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates...
CVE-2026-73052
SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option
Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in...
CVE-2026-73055
Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on
SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth()...
CVE-2026-73046
SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth() middleware. The HTTP Basi
SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation,...
CVE-2026-73042
SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to ex
SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing...
CVE-2026-73044
SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting
SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template...
CVE-2026-73043
SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which