{"generated_at":"2026-10-23T13:22:13.483Z","count":1,"incidents":[{"id":"vm2-sandbox-escape-on-node-js-26-through-a-stale-promise-cve-2026-92944","url":"https://pwned.coffee/i/vm2-sandbox-escape-on-node-js-26-through-a-stale-promise-cve-2026-92944","title":"vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector","summary":"## Reporter - Name or handle: `[YMsora]` - Report date: 2026-08-14 ## Summary The latest published vm2 release, **3.11.5**, and the current `main` branch are vulnerable to a sandbox escape when used on Node.js 26. An ordinary fulfilled Promise created by an async function can retain an attacker-controlled `constructor[Symbol.species]` across…","severity":"critical","patch_status":"patched","status":"past","exploited":false,"affected":"vm2 (npm)","fixed_versions":["vm2 3.11.7"],"ids":["CVE-2026-92944"],"stack":["npm","node"],"first_seen":"2026-10-01T15:28:07Z","updated_at":"2026-10-01T15:28:07Z"}]}