GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
6 advisories
vm2's Transformer Fast-Path Bypass Exposes Internal State Variable
Moderate
CVE-2026-44003
was published
for
vm2
(npm)
May 7, 2026
vm2 is Vulnerable to Host File Path Disclosure via Stack Trace Information Leak
Moderate
CVE-2026-44002
was published
for
vm2
(npm)
May 7, 2026
vm2 Sandbox Access to Host Buffer.alloc Allows timeout Bypass Resulting in Memory Exhaustion
High
CVE-2026-44004
was published
for
vm2
(npm)
May 7, 2026
vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)
High
CVE-2026-44001
was published
for
vm2
(npm)
May 7, 2026
LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern
High
CVE-2026-33287
was published
for
liquidjs
(npm)
Mar 25, 2026
LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash
High
CVE-2026-33285
was published
for
liquidjs
(npm)
Mar 25, 2026
ProTip!
Advisories are also available from the
GraphQL API