The vm2 sandbox component of the open-source JavaScript runtime environment Node.js is vulnerable with certain settings.
CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...
The library can currently decode greyscale and RGB images (8, 16 or 32 bits). It supports LZW compression and images with an additional alpha channel.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results