vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules.
93%
Total Score
64
100
100
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2026-47209 vm2 is vulnerable to Protection Mechanism Failure in versions 0.0.0 - 3.11.3. | 0.0.0 - 3.11.3 | |
AIKIDO-2026-10839 vm2 is vulnerable to Protection Mechanism Failure in versions 3.0.0 - 3.11.3. | 3.0.0 - 3.11.3 | |
AIKIDO-2026-10841 vm2 is vulnerable to Remote Code Execution (RCE) in versions 3.0.0 - 3.11.3. | 3.0.0 - 3.11.3 | |
AIKIDO-2026-10840 vm2 is vulnerable to Protection Mechanism Failure in versions 3.0.0 - 3.11.3. | 3.0.0 - 3.11.3 | |
AIKIDO-2026-10844 vm2 is vulnerable to Remote Code Execution (RCE) in versions 3.0.0 - 3.11.3. | 3.0.0 - 3.11.3 |
| Dependency | Last Release | Score |
|---|---|---|
acorn Version ^8.15.0 | — | — |
acorn-walk Version ^8.3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant