CVE-2026-92947 | patriksimek vm2 up to 3.11.6 Sandbox Buffer.from information disclosure

September 17, 2026 Yanac

A vulnerability labeled as problematic has been found in patriksimek vm2 up to 3.11.6. This affects the function Buffer.from of the component Sandbox. Such manipulation leads to information disclosure.

This vulnerability is referenced as CVE-2026-92947. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More