npm (Node.js)
vm2 Known Vulnerabilities & Fixes
vm2 has 46 known security vulnerabilities in npm (Node.js). Upgrade to version 3.12.2 or later to resolve all known issues. Data sourced from OSV, enriched with EPSS exploit probability and CISA KEV.
46 Vulnerabilities
Low Immediate Risk
No actively exploited vulnerabilities detected. Monitor and update in your next maintenance window.
Recommended safe version: 3.12.2
Upgrading to 3.12.2 or later resolves all 46 known vulnerabilities in vm2. Run: npm install vm2@3.12.2
Is vm2 in your project?
Check if you're affected and upgrade to 3.12.2 to stay secure.
46
Total
40
Critical
5
High
1
Medium
0
Low
Security Summary
- 46 affected version ranges have been identified across these 46 advisories.
- 100% of known issues have a published fixed version.
- Remediation: npm update vm2
Vulnerabilities
46 unique vulnerabilities — sorted by exploitation risk (KEV → EPSS → CVSS). Click a CVE/GHSA ID for full details. First disclosed Jan 26, 2026, most recently Oct 7, 2026 (254 days apart).
| CVE / GHSA | Severity | Affected | Fixed In |
|---|---|---|---|
| CVE-2026-93605 vm2 contains a sandbox escape vulnerability | CRITICAL | All versions | 3.12.1 |
| CVE-2026-100721 vm2: NodeVM custom resolution bypasses external path boundaries | CRITICAL | All versions | 3.12.2 |
| CVE-2026-92955 vm2: Sandbox Escape (NodeVM) | CRITICAL | All versions | 3.11.8 |
| CVE-2026-92953 vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix | CRITICAL | All versions | 3.11.8 |
| CVE-2026-92946 vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE | CRITICAL | All versions | 3.11.7 |
| CVE-2026-92947 vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool | CRITICAL | All versions | 3.11.7 |
| CVE-2026-92956 vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass | CRITICAL | All versions | 3.11.7 |
| CVE-2026-92940 vm2 exposes host HTTPS credentials and TLS traffic through globalAgent | CRITICAL | All versions | 3.11.7 |
| CVE-2026-92937 vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection | CRITICAL | 3.11.6 | 3.11.7 |
| CVE-2026-92941 vm2 NodeVM can replace the host process TLS trust store | CRITICAL | All versions | 3.11.7 |
| CVE-2026-92960 vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f) | CRITICAL | All versions | 3.11.6 |
| CVE-2026-92948 vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape | CRITICAL | All versions | 3.11.7 |
| CVE-2026-92951 vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package | CRITICAL | All versions | 3.11.7 |
| CVE-2026-92957 vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process | CRITICAL | All versions | 3.11.7 |
| CVE-2026-92938 vm2 allows a sandboxed plugin to execute native code through `node:sqlite` | CRITICAL | All versions | 3.11.7 |
| CVE-2026-92939 vm2 crypto builtin loads attacker native code through setEngine | CRITICAL | All versions | 3.11.7 |
| CVE-2026-47140 NodeVM builtin denylist bypass via process and inspector/promises allows host code execution | CRITICAL | All versions | 3.11.4 |
| CVE-2026-47137 vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE | CRITICAL | All versions | 3.11.4 |
| CVE-2026-47208 vm2 is Vulnerable to Sandbox Breakout Through Promise Species | CRITICAL | All versions | 3.11.4 |
| CVE-2026-47131 vm2 has a Sandbox Escape issue | CRITICAL | All versions | 3.11.4 |
| CVE-2026-47686 VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE | CRITICAL | All versions | 3.11.6 |
| CVE-2026-44005 vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape | CRITICAL | All versions | 3.11.0 |
| CVE-2026-43997 vm2 Access to Host Object Enables Sandbox Escape | CRITICAL | All versions | 3.11.0 |
| CVE-2026-44006 vm2 has a Sandbox Escape Vulnerability | CRITICAL | All versions | 3.11.0 |
| CVE-2026-92944 vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector | CRITICAL | All versions | 3.11.7 |
| CVE-2026-47698 vm2: Sandbox Breakout Using Dangerous Host Proto Mutators | CRITICAL | All versions | 3.11.6 |
| CVE-2026-43999 vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape | CRITICAL | 3.10.5 | 3.11.0 |
| CVE-2026-47210 vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass | CRITICAL | All versions | 3.11.4 |
| CVE-2026-45411 vm2 Has a Sandbox Breakout Using Async Generator | CRITICAL | All versions | 3.11.3 |
| CVE-2026-44009 vm2 has Sandbox Breakout Through Null Proto Exception | CRITICAL | All versions | 3.11.2 |
| CVE-2026-44008 vm2 has sandbox breakout via `neutralizeArraySpeciesBatch` | CRITICAL | All versions | 3.11.2 |
| CVE-2026-26956 VM2 Has a WASM Sandbox Escape | CRITICAL | All versions | 3.10.5 |
| CVE-2026-26332 VM2 Has a Sandbox Escape Issue via SuppressedError | CRITICAL | All versions | 3.11.0 |
| CVE-2026-24781 VM2 Has Sandbox Breakout Through Inspect Function | CRITICAL | All versions | 3.11.0 |
| CVE-2026-24120 VM2 Has Sandbox Breakout Through Promise Species | CRITICAL | All versions | 3.10.5 |
| CVE-2026-24118 VM2 Sandbox Breakout Through __lookupGetter__ | CRITICAL | All versions | 3.11.0 |
| CVE-2026-22709 vm2 has a Sandbox Escape | CRITICAL | All versions | 3.10.2 |
| CVE-2026-92934 vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit | CRITICAL | All versions | 3.11.8 |
| CVE-2026-92935 vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE | CRITICAL | All versions | 3.11.7 |
| CVE-2026-44007 vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution | CRITICAL | All versions | 3.11.1 |
| CVE-2026-47209 vm2's Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain | HIGH | All versions | 3.11.4 |
| CVE-2026-47139 NodeVM network builtin exclusions bypass via internal _http_client and _http_server | HIGH | All versions | 3.11.4 |
| CVE-2026-92950 vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts | HIGH | All versions | 3.11.7 |
| CVE-2026-44001 vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS) | HIGH | All versions | 3.11.0 |
| CVE-2026-47135 vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks | HIGH | All versions | 3.11.4 |
| CVE-2026-100723 vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary | MEDIUM | All versions | 3.12.2 |
About This Data
Vulnerability data for vm2 is sourced from the Open Source Vulnerability (OSV) database, aggregating reports from GitHub Advisory Database, NIST NVD, and ecosystem-specific sources.
CVSS (Common Vulnerability Scoring System) scores reflect exploitability and impact. EPSS (Exploit Prediction Scoring System) scores indicate the probability of exploitation within the next 30 days. Vulnerabilities marked with are listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.
Related npm (Node.js) Packages
Other packages in this ecosystem, ranked by shared vulnerabilities where available.
Check Your Dependencies
Scan your project to check if you're using a vulnerable version of vm2.
Data from OSV DatabaseUpdated daily200K+ vulnerabilities indexed