vm2 NodeVM boundary bypass, host memory exposure, and host crash via Promise rejection - Upwind | Cloud & AI Security for the Realtime Era

Security Feed

See the latest insights and analysis from our MDR team.

GHSA-5h3f-q97h-ccvc, GHSA-489w-w794-jq94, GHSA-2v2p-6j97-cjg9

By Nevo Evenhaim |

11 September 2026

vm2 NodeVM boundary bypass, host memory exposure, and host crash via Promise rejection

Multiple vm2 issues affect `vm2