{"uuid": "4ec44329-7fed-44e9-a5ae-cd607b237348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92956", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq4dt2b7b2t", "content": "CVE-2026-92956 - vm2\nVersions 3.10.1 through 3.11.6 of the vm2 library let code run inside its default sandbox reach the underlying Node.js environment. An attacker could obtain the real process object and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:50:10.288085Z"}