https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 18 Sep 2026 02:40:16 +0000 https://vulnerability.circl.lu/sighting/c3896ea2-d806-4346-b6ad-38a13640b27a/export {"uuid": "c3896ea2-d806-4346-b6ad-38a13640b27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92934", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.067388Z"} {"uuid": "c3896ea2-d806-4346-b6ad-38a13640b27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92934", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.067388Z"} https://vulnerability.circl.lu/sighting/c3896ea2-d806-4346-b6ad-38a13640b27a/export Thu, 17 Sep 2026 18:34:21 +0000 https://vulnerability.circl.lu/sighting/0aa0dab5-e7c2-402e-a5ba-14cec8cfd819/export {"uuid": "0aa0dab5-e7c2-402e-a5ba-14cec8cfd819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92934", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvq2gv56gf26", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-92934: vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError ob\u2026\nCVSS 9\nhttps://beta.vulnsea.com/cve/CVE-2026-92934\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-17T16:16:04.501510Z"} {"uuid": "0aa0dab5-e7c2-402e-a5ba-14cec8cfd819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92934", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvq2gv56gf26", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-92934: vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError ob\u2026\nCVSS 9\nhttps://beta.vulnsea.com/cve/CVE-2026-92934\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-17T16:16:04.501510Z"} https://vulnerability.circl.lu/sighting/0aa0dab5-e7c2-402e-a5ba-14cec8cfd819/export Thu, 17 Sep 2026 16:16:04 +0000 https://vulnerability.circl.lu/sighting/29c72003-824a-4d0a-abda-8c3639d45212/export {"uuid": "29c72003-824a-4d0a-abda-8c3639d45212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92934", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvpzyvtj2o2t", "content": "\ud83d\udea8 CVE-2026-92934 \u2014 CVSS 9.5 CRITICAL\n\nvm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when r...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92934\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:08:15.263116Z"} {"uuid": "29c72003-824a-4d0a-abda-8c3639d45212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92934", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvpzyvtj2o2t", "content": "\ud83d\udea8 CVE-2026-92934 \u2014 CVSS 9.5 CRITICAL\n\nvm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when r...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92934\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:08:15.263116Z"} https://vulnerability.circl.lu/sighting/29c72003-824a-4d0a-abda-8c3639d45212/export Thu, 17 Sep 2026 16:08:15 +0000 https://vulnerability.circl.lu/sighting/342f535e-d3db-48a0-9c5e-65e0244aa204/export {"uuid": "342f535e-d3db-48a0-9c5e-65e0244aa204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92934", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvpxctorhh2f", "content": "CVE-2026-92934 - vm2\nThe vm2 JavaScript sandbox library, versions earlier than 3.11.8, can be tricked into letting malicious code break out of its isolated environment. This could let an attacker run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T15:20:07.377451Z"} {"uuid": "342f535e-d3db-48a0-9c5e-65e0244aa204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92934", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvpxctorhh2f", "content": "CVE-2026-92934 - vm2\nThe vm2 JavaScript sandbox library, versions earlier than 3.11.8, can be tricked into letting malicious code break out of its isolated environment. This could let an attacker run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T15:20:07.377451Z"} https://vulnerability.circl.lu/sighting/342f535e-d3db-48a0-9c5e-65e0244aa204/export Thu, 17 Sep 2026 15:20:07 +0000