CVE-2026-44009

CRITICAL NVD

CVSS Score 9.8

Severity CRITICAL

Published May 13, 2026

Vendor unknown

Description

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, This vulnerability is fixed in 3.11.2.