CWE-913 Improper Control of Dynamically-Managed Code Resources
Description
The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-913 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-pq68-rvw4-xp4r | CVE-2026-93605 | CRITICAL |
vm2 contains a sandbox escape vulnerability |
2026-10-07 | |
| GHSA-88hf-g992-jg85 | CVE-2026-92955 | CRITICAL |
vm2: Sandbox Escape (NodeVM) |
2026-10-05 | |
| GHSA-gg6f-mhqm-f7gp | - | CRITICAL |
Duplicate Advisory: Sandbox Escape (NodeVM) |
2026-10-05 | |
| GHSA-3vgf-8m4q-q4qr | CVE-2026-92953 | CRITICAL |
vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix |
2026-10-05 | |
| GHSA-5v7w-95g5-pj6q | - | CRITICAL |
Duplicate Advisory: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix |
2026-10-05 | |
| GHSA-j3hm-6rg5-mchv | CVE-2026-92946 | CRITICAL |
vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE |
2026-10-05 | |
| GHSA-29x6-9qh5-83gg | - | CRITICAL |
Duplicate Advisory: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE |
2026-10-05 | |
| GHSA-wjwh-qqvp-g4p4 | CVE-2026-92956 | CRITICAL |
vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass |
2026-10-05 | |
| GHSA-8hr7-r645-pc6w | CVE-2026-92935 | CRITICAL |
vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE |
2026-10-01 | |
| GHSA-9fxx-mv6c-j5xp | - | CRITICAL |
Duplicate Advisory: NodeVM nesting guard accepts array-shaped require and permits host RCE |
2026-10-01 | |
| GHSA-27g9-p43v-cw3v | CVE-2026-92944 | CRITICAL |
vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector |
2026-10-01 | |
| GHSA-9w56-46f6-3qhx | - | MODERATE |
asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter |
2026-08-20 | |
| GHSA-cfcw-xp6x-25gj | CVE-2026-47698 | CRITICAL |
vm2: Sandbox Breakout Using Dangerous Host Proto Mutators |
2026-08-17 | |
| GHSA-qxjp-w3pj-48m7 | CVE-2026-53753 | CRITICAL |
Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API |
2026-07-20 | |
| GHSA-fjqc-hq36-qh5p | CVE-2026-48775 | MODERATE |
LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading |
2026-06-25 | |
| GHSA-4675-36f9-wf6r | CVE-2025-71323 | HIGH |
Picklescan does not block ctypes |
2026-06-18 | |
| GHSA-6j2x-vhqr-qr7q | CVE-2026-47210 | CRITICAL |
vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass |
2026-06-12 | |
| GHSA-m4wx-m65x-ghrr | CVE-2026-47137 | CRITICAL |
vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE |
2026-06-12 | |
| GHSA-76w7-j9cq-rx2j | CVE-2026-47208 | CRITICAL |
vm2 is Vulnerable to Sandbox Breakout Through Promise Species |
2026-06-12 | |
| GHSA-v6mx-mf47-r5wg | CVE-2026-47131 | CRITICAL |
vm2 has a Sandbox Escape issue |
2026-06-12 | |
| GHSA-36rr-ww3j-vrjv | CVE-2025-9905 | HIGH |
The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded. |
2026-06-06 | |
| GHSA-wxxx-gvqv-xp7p | CVE-2026-40217 | HIGH |
LiteLLM has a sandbox escape in custom-code guardrail |
2026-05-11 | |
| GHSA-9mqq-jqxf-grvw | CVE-2026-44336 | CRITICAL |
PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection |
2026-05-11 | |
| GHSA-px3p-vgh9-m57c | CVE-2026-34156 | CRITICAL |
NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node |
2026-03-31 | |
| GHSA-3m5v-4xp5-gjg2 | CVE-2026-33286 | CRITICAL |
Graphiti Affected by Arbitrary Method Execution via Unvalidated Relationship Names |
2026-03-25 |