Known vulnerabilities in vm2 - page 4

Vendor: Patrik Simek
Software: vm2
Software CPE: cpe:2.3:a:patriksimek:vm2:*:*:*:*:*:nodejs:*:*
Website: https://github.com/patriksimek
Total vulnerabilities: 76
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting vm2 vm2 is affected by 76 known vulnerabilities: 45 high, 25 medium, 6 low Critical High Medium Low

Vulnerabilities (76)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129592 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-43997		 CWE-94 High
No
No
 3.11.0 04.05.2026 SB2026012608
#VU129591 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-44006		 CWE-94 High
No
No
 3.11.0 04.05.2026 SB2026012608
#VU129589 - Incorrect Authorization
CVE-2026-43999		 CWE-863 Medium
No
No
 3.11.0 04.05.2026 SB2026012608
#VU129588 - Exposure of resource to wrong sphere
CVE-2026-44000		 CWE-668 Medium
No
No
 3.11.0 04.05.2026 SB2026012608
#VU129587 - Information Exposure Through an Error Message
CVE-2026-44002		 CWE-209 Medium
No
No
 3.11.0 04.05.2026 SB2026012608
#VU80135 - Security Features
CVE-2023-37466		 CWE-254 High
Available
No
 3.10.0 30.08.2023 SB2023083012
SB2023083025
SB2023083028
and 7 more
#VU79504 - Security Features
CVE-2023-37903		 CWE-254 Medium
No
No
 3.10.3 15.08.2023 SB2023081515
SB2023081517
SB2023081602
and 9 more
#VU76528 - Security Features
CVE-2023-32313		 CWE-254 Medium
No
No
 3.9.18 25.05.2023 SB2023052543
SB2023052545
SB2023052546
and 6 more
#VU76527 - Security Features
CVE-2023-32314		 CWE-254 High
No
No
 3.9.18 25.05.2023 SB2023052543
SB2023052545
SB2023052546
and 8 more
#VU75367 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2023-30547		 CWE-74 Medium
Available
No
 3.9.17 20.04.2023 SB2023042016
SB2023042019
SB2023042047
and 5 more
#VU75366 - Improper Control of Dynamically-Managed Code Resources
CVE-2023-29199		 CWE-913 Medium
Available
No
 3.9.16 20.04.2023 SB2023042015
SB2023042019
SB2023042047
and 7 more
#VU74606 - Improper Control of Dynamically-Managed Code Resources
CVE-2023-29017		 CWE-913 High
Available
No
 3.9.15 10.04.2023 SB2023041004
SB2023041839
SB2023042019
and 9 more
#VU70544 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25893		 CWE-94 High
No
No
 3.9.10 30.12.2022 SB2022123007
SB2023011264
SB2023092124
#VU70543 - Improper Access Control
CVE-2021-23555		 CWE-284 High
No
No
 3.9.6 30.12.2022 SB2022123006
SB2022123008
SB2022030933
and 1 more
#VU70542 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23449		 CWE-94 High
No
No
 3.9.4 30.12.2022 SB2021101814
SB2022123008
SB2021120149
#VU67205 - Improper Access Control
CVE-2022-36067		 CWE-284 High
Available
No
 3.9.11 13.09.2022 SB2022091301
SB2022091302
SB2022091303
and 5 more


Showing elements 61 - 80 out of 76