{"vulnerability": "cve-2026-9294", "sightings": [{"uuid": "0067d1a9-24f3-4afc-93dc-6793f15a4e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9294", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116626962874841105", "content": "\ud83d\udea8 New HIGH-severity vuln: CVE-2026-9294 in Edimax BR-6428NS (v1.10) enables remote buffer overflow via pppUserName in formWanTcpipSetup. Public exploit, no patch yet \u2014 restrict access & monitor traffic. https://radar.offseq.com/threat/cve-2026-9294-buffer-overflow-in-edimax-br-6428ns-e09f5444 #OffSeq #Vulnerability #RouterSecurity #CVE20269294", "creation_timestamp": "2026-05-24T01:30:26.443353Z"}, {"uuid": "0ce9bf41-c5a1-4b44-b01a-b9ee0ee2e3bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92940", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq227333b2j", "content": "\ud83d\udea8 CVE-2026-92940 \u2014 CVSS 10 CRITICAL\n\nvm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to sandboxed code when ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92940\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:08:58.682477Z"}, {"uuid": "07ee1da7-c0fe-4671-b16b-14afd0c99abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92941", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq22hlddl2r", "content": "\ud83d\udea8 CVE-2026-92941 \u2014 CVSS 10 CRITICAL\n\nvm2 versions from 3.11.3 before 3.11.7 expose the host tls module to NodeVM sandbox code, allowing attacker...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92941\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:09:08.632920Z"}, {"uuid": "20902039-e510-4e8a-aff9-b7c969791cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92944", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq22phhdz2j", "content": "\ud83d\udea8 CVE-2026-92944 \u2014 CVSS 9.3 CRITICAL\n\nvm2 versions 3.10.2 through 3.11.6 contain a sandbox escape vulnerability on Node.js 26 where Promise.proto...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92944\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:09:15.874931Z"}, {"uuid": "c0a29711-dd52-426d-aeb7-75151451ae79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92946", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq22ywnjz2y", "content": "\ud83d\udea8 CVE-2026-92946 \u2014 CVSS 10 CRITICAL\n\nvm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92946\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:09:25.734247Z"}, {"uuid": "8f85c254-3b41-4720-b3ed-0450b83b53e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92947", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq23belmi2w", "content": "\ud83d\udea8 CVE-2026-92947 \u2014 CVSS 10 CRITICAL\n\nvm2 before 3.11.7 exposes Node's shared Buffer pool to sandboxed code, allowing disclosure of host memory u...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92947\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:09:34.576748Z"}, {"uuid": "0f3fdb56-a394-4380-8125-ed4627e676ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92948", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq23jidi622", "content": "\ud83d\udea8 CVE-2026-92948 \u2014 CVSS 9.4 CRITICAL\n\nvm2 versions >= 3.9.6 and <= 3.11.6 are affected by a NodeVM builtin allowlist bypass that permits a sandbo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92948\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:09:43.047628Z"}, {"uuid": "eeb3d47e-b427-4e58-9d03-396f8c97450e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92940", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq246uklt24", "content": "CVE-2026-92940 - vm2\nVersions 3.11.3 through 3.11.6 of the vm2 tool let code running in an isolated environment see the real HTTPS connections the host makes. This can allow that code to capture\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:10:05.468885Z"}, {"uuid": "3281c247-3ac1-4014-b869-7f1eeb1f0e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92941", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq24dqwp52p", "content": "CVE-2026-92941 - vm2\nVersions of vm2 between 3.11.3 and 3.11.6 allow code running inside the sandbox to modify the Node.js TLS settings for the whole host. This lets an attacker replace the list of trusted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:10:10.931025Z"}, {"uuid": "10377293-2b76-4356-94de-fb476daa5d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92947", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq2o2j4l52y", "content": "CVE-2026-92947 - vm2\nThe vm2 module versions before 3.11.7 let code running inside its sandbox access Node\u2019s shared memory buffers. This means a malicious script could read or change data that should stay\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:20:05.334774Z"}, {"uuid": "293ffdc6-a90a-43b2-a498-30c6282c9323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92944", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq2o4zfv42f", "content": "CVE-2026-92944 - vm2\nThe vm2 library that isolates JavaScript code can be bypassed in versions 3.10.2 through 3.11.6, allowing a crafted script to break out of the sandbox and execute code on the host\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:20:07.461881Z"}, {"uuid": "e6fe741f-7554-485f-adc1-5965a5198c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92946", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq37zokqz2f", "content": "CVE-2026-92946 - vm2\nThe vm2 sandbox library for Node.js can let attackers run commands on the server if the \"require.external\" option is turned on without proper restrictions. This could let malicious code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:30:08.245511Z"}, {"uuid": "bd508487-b970-470e-ac98-42bac7525b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92948", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq3a5akg52t", "content": "CVE-2026-92948 - vm2\nVersions of the vm2 library from 3.9.6 up to 3.11.6 let specially crafted code break out of its sandbox when Node.js 24 or later is used and the node:test module is allowed. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:30:11.854093Z"}, {"uuid": "bff87bc7-2b1e-4349-9438-1a396eeb098d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92940", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.532360Z"}, {"uuid": "34c2c315-0464-4e42-bfca-f075e53153bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92941", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.593377Z"}, {"uuid": "84b86007-0cf6-4b4c-97ee-0839ee9e9427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92944", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.649908Z"}, {"uuid": "6f472c95-9e72-48f9-b6f5-8cc0f3dacea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92946", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.706960Z"}, {"uuid": "2a0f432b-72aa-4767-b1b2-292bc15eba0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92947", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.779992Z"}, {"uuid": "c4c140cf-def7-4c64-99e6-770c5c29c337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92948", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.842662Z"}, {"uuid": "fb23752b-9f0f-453c-8aa4-fba0e24c369b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92943", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqkeb2iga2v", "content": "\ud83d\udfe0 CVE-2026-92943 - High (8.1)\n\nImproper validation of certificate with host mismatch in the MQTT client TLS connection layer in ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-92943/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T21:00:57.265902Z"}, {"uuid": "1cdebb4f-cbdf-446b-af99-b5e567bd650a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92943", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqo4knln62b", "content": "\ud83d\udea8 CVE-2026-92943 \u2014 CVSS 9.2 CRITICAL\n\nImproper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT De...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92943\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T22:08:14.278860Z"}, {"uuid": "d1a6cb7f-9fc3-4c0f-82af-52d17e5cb3d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92943", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvqx5yr6ta2t", "content": "CVE-2026-92943 - awsiotpythonsdk\nThe Python SDK used to connect devices to AWS IoT can fail to verify that the server\u2019s certificate matches the expected host name. This could let a man\u2011in\u2011the\u2011middle\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#awsiotpythonsdk #aws #CVE #infosec", "creation_timestamp": "2026-09-18T00:50:04.881315Z"}, {"uuid": "727d7002-4f5b-4eee-ba60-9499e029d5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92948", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-qhwx-74w5-xhxq", "content": "", "creation_timestamp": "2026-10-01T15:41:31.000000Z"}, {"uuid": "b419620f-dc7f-47f8-943b-6aeda6f10dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92940", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-h85j-hv3c-qfgq", "content": "", "creation_timestamp": "2026-10-01T15:38:26.000000Z"}, {"uuid": "8b3819f2-5010-4e8a-ab13-528163b04e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92949", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-633r-hq9m-c4ff", "content": "", "creation_timestamp": "2026-10-01T15:35:25.000000Z"}, {"uuid": "969a3bfc-cf73-4e78-955c-e88e76925f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92944", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-27g9-p43v-cw3v", "content": "", "creation_timestamp": "2026-10-01T15:28:07.000000Z"}, {"uuid": "90a05eb0-d233-4feb-a08e-50089262e4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92941", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-98xx-8mx4-x7cm", "content": "", "creation_timestamp": "2026-10-01T15:27:28.000000Z"}, {"uuid": "22d69f67-5dfb-4458-9784-7cc04bcdf1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92948", "type": "seen", "source": "https://gist.github.com/alon710/3d54e7f6c40385c1979022b5d7e73d30", "content": "# CVE-2026-92948: CVE-2026-92948: Sandbox Escape and Remote Code Execution in vm2 via node:test\n\n> **CVSS Score:** 9.9\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92948\n\n## Summary\nCVE-2026-92948 is a critical sandbox escape vulnerability in the vm2 library affecting versions 3.9.6 through 3.11.6 when executed on Node.js 24 and newer. The vulnerability allows an attacker to bypass built-in module blocking defenses by double-prefixing a restricted module name (such as node:node:test). This permits the loading of the node:test module, whose test runner execution can be leveraged to execute arbitrary shell commands outside the VM sandbox.\n\n## TL;DR\nA critical sandbox escape in vm2 (versions >=3.9.6 to <=3.11.6) allows attackers to execute arbitrary system commands on the host by leveraging a prefix-stripping flaw to import the 'node:test' core module on Node.js 24+.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-693\n- **Attack Vector**: Network\n- **CVSS Score**: 9.9 (Critical)\n- **EPSS Score**: 0.00654\n- **Impact**: Complete Sandbox Escape & Host Remote Code Execution\n- **Exploit Status**: Proof-of-Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- vm2 (npm package) running on Node.js 24+\n- **vm2**: >= 3.9.6, <= 3.11.6 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade vm2 to version 3.11.7 or later to apply recursive prefix validation.\n- Explicitly remove wildcard ('*') and 'node:test' from the VM's builtin allowlist.\n- Migrate to isolated-vm to use secure V8 isolate-based boundaries instead of vm2.\n- Execute untrusted code within secure container environments (e.g., Docker, gVisor) to limit host system exposure.\n\n**Remediation Steps:**\n1. Identify all microservices and dependencies utilizing the vm2 npm package.\n2. Update package.json to specify vm2 version 3.11.7 or newer, then execute 'npm install'.\n3. Inspect NodeVM configurations to ensure the 'builtin' array does not contain '*' or 'node:test'.\n4. Plan the deprecation of vm2 in favor of a containerized execution model or isolated-vm.\n\n## References\n\n- [GHSA-qhwx-74w5-xhxq](https://github.com/patriksimek/vm2/security/advisories/GHSA-qhwx-74w5-xhxq)\n- [VulnCheck Advisory](https://www.vulncheck.com/advisories/vm2-3.9.6-through-3.11.5-sandbox-escape-via-node-test)\n- [vm2 v3.11.7 Release Notes](https://github.com/patriksimek/vm2/releases/tag/v3.11.7)\n- [NVD CVE-2026-92948 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-92948)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92948) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-01T23:30:31.000000Z"}, {"uuid": "c9bf667a-34c4-4412-89a6-b874ee63219d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92940", "type": "seen", "source": "https://gist.github.com/alon710/8668fd6a23c76d394335860a03691015", "content": "# CVE-2026-92940: CVE-2026-92940: Host-Realm Credential Exposure and Socket Hijacking via globalAgent in vm2\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92940\n\n## Summary\nA critical vulnerability in the Node.js sandbox library vm2 allows sandboxed code to retrieve the process-wide http.globalAgent and https.globalAgent singletons. By attaching event listeners to these host-realm emitters, sandboxed code can intercept host-realm network requests, capturing sensitive Authorization headers and hijacking active TLSSocket streams.\n\n## TL;DR\nA sandbox escape in vm2 (versions 3.11.3 to 3.11.6) allows untrusted code to access and hook the host process-wide http/https globalAgent. This enables unauthenticated attackers to steal sensitive headers (like Bearer tokens) and hijack active sockets during unrelated host-realm requests.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-668: Exposure of Resource to Wrong Sphere\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 10.0 (Critical)\n- **EPSS Score**: 0.00474 (Percentile: 38.70%)\n- **Impact**: Host Credential Disclosure & Transport Socket Hijacking\n- **Exploit Status**: Proof-of-Concept (PoC) available via official regression test suite\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- vm2 (npm package)\n- **vm2**: >= 3.11.3, <= 3.11.6 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade vm2 to version 3.11.7 or newer to apply member-level neutralization on built-in HTTP/HTTPS modules.\n- Disable the 'http' and 'https' built-in modules inside the NodeVM configuration settings to remove the attack vector entirely.\n- Implement outbound network requests outside of the sandbox boundary using a strictly validated custom host-realm API rather than exposing native raw network modules.\n- Transition application architectures away from vm2 to modern isolated runtimes, such as isolated-vm or VM containers.\n\n**Remediation Steps:**\n1. Locate and audit package.json and project lockfiles for vm2 references within versions 3.11.3 and 3.11.6.\n2. Run 'npm install vm2@3.11.7' or 'yarn upgrade vm2@3.11.7' to deploy the patched library version.\n3. Review initialization scripts of NodeVM to ensure that 'http' and 'https' are absent from the require.builtin array.\n4. Validate the fix by executing the official regression test to ensure host globalAgent is no longer reachable from the sandbox environment.\n\n## References\n\n- [GHSA-h85j-hv3c-qfgq Security Advisory](https://github.com/patriksimek/vm2/security/advisories/GHSA-h85j-hv3c-qfgq)\n- [VulnCheck Vulnerability Report](https://www.vulncheck.com/advisories/vm2-3.11.3-through-3.11.6-https-credential-exposure-via-globalagent)\n- [Official Patch Commit](https://github.com/patriksimek/vm2/commit/aa146a77f859325e079f3bfbfe6d8309af483daa)\n- [vm2 v3.11.7 Release Tag](https://github.com/patriksimek/vm2/releases/tag/v3.11.7)\n- [NVD CVE-2026-92940 Details](https://nvd.nist.gov/vuln/detail/CVE-2026-92940)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92940) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-02T01:30:30.000000Z"}, {"uuid": "64dcbef7-d759-4c7d-be3e-82773d0e3826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92949", "type": "seen", "source": "https://gist.github.com/alon710/b14d056fc55a9e22e09072f52e241311", "content": "# CVE-2026-92949: CVE-2026-92949: Sandbox Escape and State Mutation in vm2 via Accessor Property Descriptor Leak\n\n> **CVSS Score:** 4.0\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92949\n\n## Summary\nCVE-2026-92949 is a sandbox bypass vulnerability in the vm2 library affecting versions 3.9.6 through 3.11.6. The flaw exists due to a breakdown in the ReadOnlyHandler proxy boundary, allowing sandboxed scripts to obtain direct references to wrapped property setters on frozen host-bound objects, ultimately leading to unauthorized state modification in the host environment. This security failure violates the read-only contract enforced by the sandbox for frozen/readonly objects, though it does not by itself allow a full execution-level realm escape. Due to systemic and structural design difficulties in securing a shared-runtime JavaScript sandbox, the vm2 library has been officially deprecated.\n\n## TL;DR\nA security flaw in vm2's proxy bridge allows sandboxed applications to leak and invoke property setters on frozen objects, enabling unauthorized write access to host-realm configurations and bypassing isolation controls.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-471: Modification of Assumed-Immutable Data (MAID)\n- **Attack Vector**: Network / Sandboxed Script Execution\n- **CVSS Score**: 4.0 (Medium)\n- **EPSS Score**: 0.00319 (Percentile: 22.47%)\n- **Impact**: Low Integrity (State Modification of Host objects)\n- **Exploit Status**: Proof of Concept (PoC) Verified\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Node.js applications running vm2 library within multi-tenant execution contexts\n- **vm2**: >= 3.9.6, < 3.11.7 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade to vm2 version 3.11.7 or later to apply the explicit descriptor-filtering patch.\n- Migrate the application execution pipeline from the deprecated vm2 library to isolated-vm.\n- Enforce strict input sanitization inside host-defined accessors exposed to untrusted code.\n- Avoid passing complex host objects containing getters/setters to sandboxed contexts.\n\n**Remediation Steps:**\n1. Identify instances of vm2 in package.json and transitively via npm-list.\n2. Update the package version constraint to 3.11.7.\n3. Execute npm install to rebuild dependency trees with the patched version.\n4. Prepare a migration path to isolate untrusted scripts inside isolated-vm or isolated micro-containers.\n\n## References\n\n- [Official GitHub Security Advisory (GHSA-633r-hq9m-c4ff)](https://github.com/patriksimek/vm2/security/advisories/GHSA-633r-hq9m-c4ff)\n- [VulnCheck Vulnerability Advisory](https://www.vulncheck.com/advisories/vm2-3.9.6-before-3.11.7-sandbox-bypass-via-accessor-descriptor)\n- [Official Release tag (v3.11.7)](https://github.com/patriksimek/vm2/releases/tag/v3.11.7)\n- [NVD Vulnerability Page](https://nvd.nist.gov/vuln/detail/CVE-2026-92949)\n- [CVE.org Official Record](https://www.cve.org/CVERecord?id=CVE-2026-92949)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92949) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-02T05:30:32.000000Z"}, {"uuid": "f6561d97-d74d-44aa-9b01-2045c0cad6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92944", "type": "seen", "source": "https://gist.github.com/alon710/f685287634c3e6a3e82191e551c8ed27", "content": "# CVE-2026-92944: CVE-2026-92944: Sandbox Escape in vm2 via Stale V8 PromiseThenLookupChain Protector\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92944\n\n## Summary\nA critical engine-level reachability failure in Node.js 26 running V8 14.6 allows attackers to escape the vm2 sandbox environment. When consecutive prototype properties are modified using sequential assignments, a V8 optimization bug fails to invalidate the PromiseThenLookupChain protector. By calling Promise.prototype.finally, the attacker bypasses the vm2 wrappers, hijacks the promise reaction using a custom constructor, triggers a calibrated stack overflow to capture a host-realm RangeError, and executes arbitrary shell commands on the host.\n\n## TL;DR\nAn optimization bug in the V8 engine on Node.js 26 fails to invalidate a promise lookup protector when properties are assigned sequentially, allowing attackers to bypass vm2's promise wrappers and achieve full sandbox escape and remote code execution.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-693\n- **Attack Vector**: Network\n- **CVSS Score**: 9.8\n- **EPSS Score**: 0.00841\n- **Impact**: Arbitrary Code Execution / Sandbox Escape\n- **Exploit Status**: PoC\n- **KEV Status**: No\n\n## Affected Systems\n\n- vm2 running on Node.js 26 (V8 14.6)\n- **vm2**: >= 3.10.2, <= 3.11.6 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade vm2 to 3.11.7 or higher to apply property definition overrides\n- Run Node.js with the --no-proto-assign-seq-opt flag to disable the buggy V8 optimization\n- Migrate to process-isolated sandbox solutions like isolated-vm\n\n**Remediation Steps:**\n1. Identify all projects and dependencies relying on vm2\n2. Update the package.json dependency to 'vm2': '^3.11.7'\n3. In corporate CI/CD pipelines, configure Node.js launch configurations with the --no-proto-assign-seq-opt flag as a defense-in-depth measure\n\n## References\n\n- [GitHub Security Advisory GHSA-27g9-p43v-cw3v](https://github.com/patriksimek/vm2/security/advisories/GHSA-27g9-p43v-cw3v)\n- [VulnCheck Advisory for CVE-2026-92944](https://www.vulncheck.com/advisories/vm2-3.10.2-through-3.11.6-sandbox-escape-via-promise-protector)\n- [CVE-2026-92944 Record](https://www.cve.org/CVERecord?id=CVE-2026-92944)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92944) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-02T10:30:30.000000Z"}, {"uuid": "6cd7587c-f16b-46b2-b8c5-7bdff938ce63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92941", "type": "seen", "source": "https://gist.github.com/alon710/9ce08c3782a7543f3e1b75e57f063eef", "content": "# CVE-2026-92941: CVE-2026-92941: Sandbox Escape and Process-Wide TLS Trust Store Manipulation in vm2\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92941\n\n## Summary\nCVE-2026-92941 is a critical sandbox-escape and trust-manipulation vulnerability in the vm2 library (versions 3.11.3 to 3.11.6). This security flaw allows untrusted code executing within a NodeVM sandbox environment to compromise the global TLS trust store of the host Node.js process. By leveraging a design flaw where the host's native 'tls.setDefaultCACertificates' can be executed via a proxy wrapper, combined with a bridge unwrapping bypass in the 'url' module, an attacker can modify the process-wide default root Certificate Authorities. Consequently, all subsequent outbound TLS/HTTPS clients running on the host thread are forced to trust attacker-signed certificates, facilitating transparent Man-in-the-Middle (MitM) attacks. The vulnerability was resolved in version 3.11.7 of vm2 by introducing built-in member-level sanitization before applying read-only proxy wrappers.\n\n## TL;DR\nA critical flaw in vm2 (3.11.3-3.11.6) allows sandboxed code to bypass isolation and overwrite the global Node.js root CAs, enabling complete Man-in-the-Middle compromise of outbound host HTTPS connections.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-732\n- **Attack Vector**: Network / Code Execution Boundary\n- **CVSS Score**: 10.0\n- **EPSS Score**: 0.00289\n- **Impact**: Process-Wide TLS Trust Store Compromise\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Applications utilizing the vm2 Node.js library configured with a NodeVM instance that permits access to both 'tls' and 'url' built-in modules.\n- **vm2**: >= 3.11.3, < 3.11.7 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade vm2 dependency to version 3.11.7 or later.\n- Audit allowed sandbox modules and disable 'tls' or 'url' unless strictly required.\n- Migrate the application away from the deprecated vm2 library to secure isolated runtimes.\n\n**Remediation Steps:**\n1. Inspect package.json and update vm2 to version 3.11.7.\n2. If upgrading is not immediate, modify NodeVM options to remove 'tls' and 'url' from the allowed builtin array.\n3. Initiate migration plans to move sandboxed scripts to separate worker_threads, WebAssembly sandboxes, or containerized environments.\n\n## References\n\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-92941)\n- [NVD Record](https://nvd.nist.gov/vuln/detail/CVE-2026-92941)\n- [GitHub Security Advisory](https://github.com/patriksimek/vm2/security/advisories/GHSA-98xx-8mx4-x7cm)\n- [Official Remediation Commit](https://github.com/patriksimek/vm2/commit/aa146a77f859325e079f3bfbfe6d8309af483daa)\n- [Official Release v3.11.7](https://github.com/patriksimek/vm2/releases/tag/v3.11.7)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92941) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-02T11:30:31.000000Z"}, {"uuid": "ddd2ba40-5d09-4ba2-99b1-a670287e9645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92945", "type": "seen", "source": "https://gist.github.com/alon710/6cfe4dbe62cd03538dfef38f32b35ab8", "content": "# CVE-2026-92945: CVE-2026-92945: Sandbox Escape and Module Allowlist Bypass via Path Prefix Matching in vm2\n\n> **CVSS Score:** 4.2\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92945\n\n## Summary\nA module allowlist bypass vulnerability (CVE-2026-92945 / GHSA-7q3f-wx44-378m) was identified in the vm2 sandboxing library prior to version 3.11.7. This flaw permits unauthenticated or untrusted code running within the sandbox environment to bypass explicit module restrictions. When the transitive resolution option is disabled, the system fails to validate file system path boundaries, allowing prefix-sharing sibling directories to be resolved and loaded, thereby escaping intended sandbox restrictions.\n\n## TL;DR\nA path traversal and module allowlist bypass flaw in vm2's legacy resolver allows sandboxed code to load un-allowlisted sibling packages that share a lexical prefix with allowlisted modules.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **Vulnerability ID**: CVE-2026-92945 / GHSA-7q3f-wx44-378m\n- **CWE ID**: CWE-22 (Path Traversal), CWE-863 (Incorrect Authorization)\n- **Attack Vector**: Network (AV:N)\n- **Attack Complexity**: High (AC:H)\n- **CVSS v3.1 Score**: 4.2 (Medium)\n- **EPSS Score**: 0.00277 (18.25th percentile)\n- **Exploit Status**: Proof of Concept available\n- **CISA KEV Status**: Not listed\n\n## Affected Systems\n\n- vm2 Node.js sandboxing library\n- **vm2**: >= 0, < 3.11.7 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade vm2 to 3.11.7 or later.\n- Avoid using 'transitive: false' options with shared sibling directories.\n- Employ strict path normalization and canonicalization before verification checks.\n\n**Remediation Steps:**\n1. Identify vulnerable vm2 dependencies using 'npm audit' or 'yarn audit'.\n2. Update the dependency declaration of vm2 in package.json to '^3.11.7'.\n3. Verify that no prefix-sharing modules exist alongside sandboxed dependencies in the deployment environment.\n\n## References\n\n- [GitHub Security Advisory GHSA-7q3f-wx44-378m](https://github.com/patriksimek/vm2/security/advisories/GHSA-7q3f-wx44-378m)\n- [Fix Commit 6ac3916da84e060c403e407b6b6318fcc66b0e72](https://github.com/patriksimek/vm2/commit/6ac3916da84e060c403e407b6b6318fcc66b0e72)\n- [vm2 Release v3.11.7](https://github.com/patriksimek/vm2/releases/tag/v3.11.7)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/vm2-before-3.11.7-module-allowlist-bypass-via-prefix-matching)\n- [NVD - CVE-2026-92945](https://nvd.nist.gov/vuln/detail/CVE-2026-92945)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92945) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-02T12:30:31.000000Z"}, {"uuid": "19b2a7f3-fece-4fce-9fe4-b2bf573ed3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92942", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-r4fx-v8hh-22mv", "content": "", "creation_timestamp": "2026-10-05T22:35:04.000000Z"}, {"uuid": "3311c1cb-4b59-4bb3-9748-1db69dbad84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92947", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-fcqc-726x-5wfc", "content": "", "creation_timestamp": "2026-10-05T22:34:35.000000Z"}, {"uuid": "eaab6f8a-0915-44e9-a0c2-cb49263f1b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92946", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-j3hm-6rg5-mchv", "content": "", "creation_timestamp": "2026-10-05T22:34:50.000000Z"}]}