vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process
osv · CVE-2026-92957
npm: vm2
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
osv · CVE-2026-92957
npm: vm2
cve-program ·
Vendor product: Hitachi Coding Software Suite
cve-program ·
Vendor product: REBUILD
cve-program ·
Vendor product: Hitachi Coding Software Suite
cve-program ·
Vendor product: Hitachi Coding Software Suite
cve-program ·
Vendor product: SurfSense
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: Hitachi Coding Software Suite
cve-program ·
Vendor product: Digital Experience
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: Thunderbird · Vendor product: Firefox
cve-program ·
Vendor product: yii2-starter-kit
cve-program ·
Vendor product: MISP
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: Apeos 3060 / 2560 / 1860 Japan model · Vendor product: Apeos 3061 / 2561 / 2061 Japan model · Vendor product: Apeos 4570 / 3570 Japan model
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: Ghost
cve-program ·
Vendor product: NAP930
osv · CVE-2026-92708
npm: devalue
cve-program ·
Vendor product: raspap-webgui
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: OpenClaw Windows Node
cve-program ·
Vendor product: Core
cve-program ·
Vendor product: Email Protection Gateway
cve-program ·
Vendor product: Email Protection Gateway
cve-program ·
Vendor product: Core
cve-program ·
Vendor product: BoKS Manager
cve-program ·
Vendor product: BoKS Manager
cve-program ·
Vendor product: HCL BigFix Service Management
cve-program ·
Vendor product: HCL BigFix Service Management
cve-program ·
Vendor product: HCL BigFix Service Management
cve-program ·
Vendor product: HCL BigFix Service Management
cve-program ·
Vendor product: OpenDMARC
cve-program ·
Vendor product: GestSup
cve-program ·
Vendor product: openSIS-Classic
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: MISP
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: MISP
cve-program ·
https://github.com/sharkcz/collectl: collectl
cve-program ·
Vendor product: OpenDMARC
cve-program ·
https://wordpress.org/plugins: authorizer
cve-program ·
https://wordpress.org/plugins: acymailing
cve-program ·
https://wordpress.org/plugins: premmerce-woocommerce-wishlist
cve-program ·
https://wordpress.org/plugins: wedevs-project-manager
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.