vm2: NodeVM custom resolution bypasses external path boundaries

## Summary At source revision `91034466bfb7f56b95fd48083ec6ca36d058f164` of vm2 3.11.8, an untrusted `NodeVM` guest can turn one allowlisted custom-resolved module into authorization for a separate f

CVSS 10.0

vm2: Sandbox Escape (NodeVM)

## Summary It being possible to obtain the host `__proto__` getter/setter, has been used in many reports: - https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq - https://githu

CVSS 10.0

vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix

## Summary vm2's current host-intrinsic prototype protection is incomplete. The fix for `GHSA-vwrp-x96c-mhwq` blocks sandbox writes into classic host intrinsics such as `Object.prototype`, `Array.pro

CVSS 10.0

vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access a

## Summary `NodeVM`'s `require.external` option lets sandboxed code `require()` local files and npm packages. When `require.external` is enabled and `require.root` is **not explicitly set to a path t

CVSS 10.0

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

### Summary Sandboxed code is able to disclose host memory used by small allocations by `Buffer.from`, `Buffer.concat`. ### Details vm2 exposes `Buffer` object to sandboxed code by default. Small [`B

CVSS 10.0

vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass

## Summary There is a sandbox escape in vm2 `3.11.5` / current HEAD when it is used on Node.js 26. The issue is reachable from a default `new VM()` sandbox. No `NodeVM`, `require` permission, host ob

CVSS 10.0

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

## Summary When an application explicitly exposes Node's `zlib` module through vm2's `NodeVM` builtin allowlist, an untrusted guest can obtain a pool-backed host `Buffer` from `zlib.deflateSync`, cre

CVSS 10.0

Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP

Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuratio

CVSS 9.9

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticat

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution (RCE) on the server by adding an MCP se

CVSS 9.9

Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass

### Summary A vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the `W

CVSS 9.8

Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metad

Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQL connectedAccounts query returned connectionParameters from ConnectedAccountDTO

CVSS 9.6

h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management

h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible a

CVSS 9.3

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and cause the School Information update path to reset that selecte

CVSS 9.3

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability b

CVSS 9.2

Langflow: Weak Fernet Key via random.seed()

### Summary Langflow uses Python's `random` module (Mersenne Twister, a non-cryptographic PRNG) seeded with the `SECRET_KEY` to derive the Fernet encryption key for all stored user credentials (API k

CVSS 9.1