Package impact
NPM / vm2
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-44003 | medium | 5.8 | 5.8 | 22d ago | vm2's Transformer Fast-Path Bypass Exposes Internal State Variable | |||
| CVE-2026-44002 | medium | 5.8 | 5.8 | 22d ago | vm2 is Vulnerable to Host File Path Disclosure via Stack Trace Information Leak |