org.webjars.npm:vm2

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.npm:vm2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
C Information Exposure	[,3.11.7)
M Modification of Assumed-Immutable Data (MAID)	[3.9.6,3.11.7)
M Information Exposure	[3.11.0,3.11.7)
M Information Exposure	[,3.11.2)
M Exposure of Resource to Wrong Sphere	[,3.12.2)
H Uncaught Exception	[,3.12.2)
M Protection Mechanism Failure	[,3.12.1)
H Denial of Service (DoS)	[,3.11.7)
H Protection Mechanism Failure	[,3.11.8)
C Arbitrary Code Injection	[3.11.6,3.11.7)
M Information Exposure	[,3.11.8)
C Exposure of Resource to Wrong Sphere	[3.11.3,3.11.7)
C Protection Mechanism Failure	[,3.11.8)
C Protection Mechanism Failure	[3.10.2,3.11.7)
C Incorrect Authorization	[,3.12.2)
C Improper Control of Dynamically-Managed Code Resources	[,3.12.1)
C Improper Control of Dynamically-Managed Code Resources	[,3.12.1)
C Improper Control of Dynamically-Managed Code Resources	[,3.12.1)
C Incorrect Permission Assignment for Critical Resource	[3.11.3,3.11.7)
C Improper Privilege Management	[,3.11.7)
C Improper Control of Dynamically-Managed Code Resources	[3.11.0,3.11.8)
C Protection Mechanism Failure	[3.10.1,3.11.7)
H Improper Privilege Management	[,3.11.7)
C Process Control	[3.11.3,3.11.7)
C Use of Incorrectly-Resolved Name or Reference	[,3.11.7)
C Improper Control of Dynamically-Managed Code Resources	[,3.11.8)
C Uncaught Exception	[3.10.0,3.11.8)
C Protection Mechanism Failure	[3.9.6,3.11.7)
L Directory Traversal	[,3.11.7)
C Insecure Defaults	[,3.11.7)
C Improper Control of Dynamically-Managed Code Resources	[3.11.4,3.11.7)
H Incorrect Resource Transfer Between Spheres	[3.11.4,3.11.7)
C Protection Mechanism Failure	[3.11.3,3.11.7)
H Allocation of Resources Without Limits or Throttling	[,3.11.6)
C Incorrect Permission Assignment for Critical Resource	[,3.11.6)
C Improper Control of Dynamically-Managed Code Resources	[,3.11.6)
H Allocation of Resources Without Limits or Throttling	[,3.11.6)
C Remote Code Execution (RCE)	[0,)
H Arbitrary Code Injection	[,3.11.6)
C Incomplete List of Disallowed Inputs	[0,)
H Incomplete List of Disallowed Inputs	[0,)
C Incomplete List of Disallowed Inputs	[0,)
C Improper Control of Dynamically-Managed Code Resources	[0,)
C Improper Control of Dynamically-Managed Code Resources	[0,)
C Improper Control of Dynamically-Managed Code Resources	[0,)
C Improper Control of Dynamically-Managed Code Resources	[0,)
C Improperly Controlled Modification of Dynamically-Determined Object Attributes	[0,)
H Protection Mechanism Failure	[0,)
C Arbitrary Code Injection	[0,)
M Improper Isolation or Compartmentalization	[0,)
C Arbitrary Code Injection	[0,)
C Improper Isolation or Compartmentalization	[0,)
H Symlink Attack	[0,)
M Improper Isolation or Compartmentalization	[0,)
M Improper Isolation or Compartmentalization	[0,)
M Information Exposure	[0,)
H Allocation of Resources Without Limits or Throttling	[0,)
C Arbitrary Code Injection	[3.9.19,)
C Arbitrary Code Injection	[0,)
C Uncaught Exception	[0,)
C Arbitrary Code Injection	[0,)
C Arbitrary Code Injection	[0,)
C Arbitrary Code Injection	[0,)
C Arbitrary Code Injection	[0,)
C Arbitrary Code Injection	[0,)
C Arbitrary Code Injection	[0,)
H Improper Control of Dynamically-Managed Code Resources	[0,)
C Remote Code Execution (RCE)	[0,)
C Remote Code Execution (RCE)	[0,)
C Sandbox Bypass	[,3.9.19)
M Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')	[,3.9.19)
C Improper Handling of Exceptional Conditions	[,3.9.19)
C Sandbox Escape	[,3.9.19)
C Sandbox Escape	[,3.9.19)
C Sandbox Bypass	[,3.9.19)
C Sandbox Bypass	[,3.9.19)
C Sandbox Bypass	[,3.9.19)
H Sandbox Bypass	[,3.6.11)

Vulnerability

Vulnerable Version

Information Exposure

[,3.11.7)