{"vulnerability": "cve-2026-93603", "sightings": [{"uuid": "3d346902-80e2-42fb-90ca-f0299693138f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93603", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117292483452078658", "content": "RE: https://infosec.exchange/@cR0w/117287817060203283\nBut wait, there's more perfect 10s!\ud83e\udd73 https://www.cve.org/CVERecord?id=CVE-2026-93603\nhttps://www.cve.org/CVERecord?id=CVE-2026-93605\nhttps://www.cve.org/CVERecord?id=CVE-2026-93606", "creation_timestamp": "2026-09-18T14:21:04.705700Z"}, {"uuid": "eea1bb19-8f34-4339-9355-24309132bb5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93603", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsgypqkbn2e", "content": "\ud83d\udd34 CVE-2026-93603 - Critical (10)\n\nvm2 through 3.12.0 (fixed in 3.12.1) does not correctly handle a nullish `this` receiver in the a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93603/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T15:06:08.815643Z"}, {"uuid": "60bfe364-85d0-47e3-9b25-22b6ed40a01b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93603", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvskgj25mf2j", "content": "\ud83d\udea8 CVE-2026-93603 \u2014 CVSS 10 CRITICAL\n\nvm2 through 3.12.0 (fixed in 3.12.1) does not correctly handle a nullish `this` receiver in the apply trap ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93603\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T16:07:30.978546Z"}, {"uuid": "d07bac21-3c67-4fd5-a0cf-d725f5be7b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93603", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsz3zmtlq22", "content": "CVE-2026-93603 - vm2\nThe vm2 JavaScript sandbox (versions before 3.12.1) can mistakenly give untrusted code access to the host system's global objects. If your application exposes any non\u2011strict host\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-18T20:30:06.441798Z"}]}