Known vulnerabilities in vm2 - page 2

Vendor: Patrik Simek
Software: vm2
Software CPE: cpe:2.3:a:patriksimek:vm2:*:*:*:*:*:nodejs:*:*
Website: https://github.com/patriksimek
Total vulnerabilities: 41
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting vm2 vm2 is affected by 41 known vulnerabilities: 27 high, 11 medium, 3 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129592 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-43997		 CWE-94 High
No
No
 3.11.0 04.05.2026 SB2026012608
#VU129591 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-44006		 CWE-94 High
No
No
 3.11.0 04.05.2026 SB2026012608
#VU129590 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-43998		 CWE-59 Medium
No
No
 3.11.0 04.05.2026 SB2026012608
#VU129589 - Incorrect Authorization
CVE-2026-43999		 CWE-863 Medium
No
No
 3.11.0 04.05.2026 SB2026012608
#VU129588 - Exposure of resource to wrong sphere
CVE-2026-44000		 CWE-668 Medium
No
No
 3.11.0 04.05.2026 SB2026012608
#VU129587 - Information Exposure Through an Error Message
CVE-2026-44002		 CWE-209 Medium
No
No
 3.11.0 04.05.2026 SB2026012608
#VU129586 - Protection Mechanism Failure
CVE-2026-44003		 CWE-693 Medium
No
No
 3.11.0 04.05.2026 SB2026012608
#VU129585 - Allocation of Resources Without Limits or Throttling
CVE-2026-44004		 CWE-770 Medium
No
No
 3.11.0 04.05.2026 SB2026012608
#VU129584 - Improper Access Control
CVE-2026-44005		 CWE-284 High
No
No
 3.11.0 04.05.2026 SB2026012608
#VU122009 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-22709		 CWE-94 High
No
No
 3.11.0 26.01.2026 SB2026012608
#VU80135 - Security Features
CVE-2023-37466		 CWE-254 High
Available
No
 3.10.0 30.08.2023 SB2023083012
SB2023083025
SB2023083028
and 7 more
#VU79504 - Security Features
CVE-2023-37903		 CWE-254 Medium
No
No
 3.10.3 15.08.2023 SB2023081515
SB2023081517
SB2023081602
and 9 more
#VU76528 - Security Features
CVE-2023-32313		 CWE-254 Medium
No
No
 3.9.18 25.05.2023 SB2023052543
SB2023052545
SB2023052546
and 6 more
#VU76527 - Security Features
CVE-2023-32314		 CWE-254 High
No
No
 3.9.18 25.05.2023 SB2023052543
SB2023052545
SB2023052546
and 8 more
#VU75367 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2023-30547		 CWE-74 Medium
Available
No
 3.9.17 20.04.2023 SB2023042016
SB2023042019
SB2023042047
and 5 more
#VU75366 - Improper Control of Dynamically-Managed Code Resources
CVE-2023-29199		 CWE-913 Medium
Available
No
 3.9.16 20.04.2023 SB2023042015
SB2023042019
SB2023042047
and 7 more
#VU74606 - Improper Control of Dynamically-Managed Code Resources
CVE-2023-29017		 CWE-913 High
Available
No
 3.9.15 10.04.2023 SB2023041004
SB2023041839
SB2023042019
and 9 more
#VU70544 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25893		 CWE-94 High
No
No
 3.9.10 30.12.2022 SB2022123007
SB2023011264
SB2023092124
#VU70543 - Improper Access Control
CVE-2021-23555		 CWE-284 High
No
No
 3.9.6 30.12.2022 SB2022123006
SB2022123008
SB2022030933
and 1 more
#VU67205 - Improper Access Control
CVE-2022-36067		 CWE-284 High
Available
No
 3.9.11 13.09.2022 SB2022091301
SB2022091302
SB2022091303
and 5 more


Showing elements 21 - 40 out of 41