CPE

Cpe:2.3:a:vm2_project:vm2:3.10.0:::::node.js::

1 brief RSS

vm2 Denial of Service via Host-Returned Promise Rejection

A vulnerability in the vm2 sandbox library (CVE-2026-92954) allows sandbox-based code to terminate the host Node.js process by invoking host-realm functions that return unhandled rejected Promises.

vm2 denial-of-service sandbox-escape nodejs

1t 1c 3d ago

Cpe:2.3:a:vm2_project:vm2:3.10.0:*:*:*:*:node.js:*:*

vm2 Denial of Service via Host-Returned Promise Rejection

Cpe:2.3:a:vm2_project:vm2:3.10.0:::::node.js::