← العودة للجدول
CVE-2026-47209
CVE-2026-47209 — vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseH
📅 2026-06-12
🟠 High 🔥 No NVD Exploit Vulnerability CVSS 8.6

📋 الوصف الكامل

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseHandler.set trap in bridge.js (line 1231) ignores the receiver parameter and unconditionally writes to the host target object. Per the Proxy set trap specification, when receiver !== proxy (e.g., when a child object inherits from the proxy via Object.create), the property assignment should create an own property on the

💻 الأنظمة المتأثرة

Node.js

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-47209

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v3.11.4

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←