{"uuid": "bd508487-b970-470e-ac98-42bac7525b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92948", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq3a5akg52t", "content": "CVE-2026-92948 - vm2\nVersions of the vm2 library from 3.9.6 up to 3.11.6 let specially crafted code break out of its sandbox when Node.js 24 or later is used and the node:test module is allowed. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:30:11.854093Z"}