Known vulnerabilities in vm2 3.11.6

Vendor: Patrik Simek
Software: vm2
Version: 3.11.6
Software CPE: cpe:2.3:a:patriksimek:vm2:*:*:*:*:*:nodejs:*:*
Website: https://github.com/patriksimek
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting vm2 version 3.11.6 vm2 3.11.6 is affected by 30 vulnerabilities: 16 high, 11 medium, 3 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146900 - Protection Mechanism Failure
CVE-2026-93606		 CWE-693 High
No
No
 3.12.1 04.09.2026 SB2026090407
#VU146899 - Protection Mechanism Failure
CVE-2026-93605		 CWE-693 High
No
No
 3.12.1 04.09.2026 SB2026090407
#VU146898 - Improper Access Control
CVE-2026-93604		 CWE-284 Medium
No
No
 3.12.1 04.09.2026 SB2026090407
#VU146897 - Improper Control of Dynamically-Managed Code Resources
CVE-2026-93603		 CWE-913 High
No
No
 3.12.1 04.09.2026 SB2026090407
#VU146046 - Protection Mechanism Failure
CVE-2026-92959		 CWE-693 Low
No
No
 3.11.8 28.08.2026 SB2026082830
#VU146045 - Improper Control of Dynamically-Managed Code Resources
CVE-2026-92955		 CWE-913 High
No
No
 3.11.8 28.08.2026 SB2026082830
#VU146044 - Uncaught Exception
CVE-2026-92954		 CWE-248 High
No
No
 3.11.8 28.08.2026 SB2026082830
#VU146043 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-92953		 CWE-1321 High
No
No
 3.11.8 28.08.2026 SB2026082830
#VU146042 - Protection Mechanism Failure
CVE-2026-92934		 CWE-693 High
No
No
 3.11.8 28.08.2026 SB2026082830
#VU146041 - Exposure of sensitive information to an unauthorized actor
CVE-2026-92933		 CWE-200 Medium
No
No
 3.11.8 28.08.2026 SB2026082830
#VU145058 - Improper Access Control
CVE-2026-92958		 CWE-284 Medium
No
No
 3.11.7 25.08.2026 SB2026082527
#VU145057 - Improper Access Control
CVE-2026-92957		 CWE-284 Medium
No
No
 3.11.7 25.08.2026 SB2026082527
#VU145056 - Protection Mechanism Failure
CVE-2026-92956		 CWE-693 High
No
No
 3.11.7 25.08.2026 SB2026082527
#VU145055 - Incorrect Resource Transfer Between Spheres
CVE-2026-92952		 CWE-669 Medium
No
No
 3.11.7 25.08.2026 SB2026082527
#VU145054 - Use of Incorrectly-Resolved Name or Reference
CVE-2026-92951		 CWE-706 Medium
No
No
 3.11.7 25.08.2026 SB2026082527
#VU145053 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-92950		 CWE-829 High
No
No
 3.11.7 25.08.2026 SB2026082527
#VU145052 - Modification of Assumed-Immutable Data
CVE-2026-92949		 CWE-471 Low
No
No
 3.11.7 25.08.2026 SB2026082527
#VU145051 - Protection Mechanism Failure
CVE-2026-92948		 CWE-693 Medium
No
No
 3.11.7 25.08.2026 SB2026082527
#VU145050 - Improper isolation or compartmentalization
CVE-2026-92947		 CWE-653 High
No
No
 3.11.7 25.08.2026 SB2026082527
#VU145049 - Improper Control of Dynamically-Managed Code Resources
CVE-2026-92946		 CWE-913 High
No
No
 3.11.7 25.08.2026 SB2026082527


Showing elements 1 - 20 out of 30