CWE-1100

4 CVEs classified under CWE-1100. Browse by severity and year.

Top CVEs for CWE-1100
CVESeverityScorePublishedSummary
CVE-2026-44008Critical9.82026-05-13vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with objects from the other side but can call i…
CVE-2026-44007Critical9.12026-05-13vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created with nesting: true, sandbox code can unconditionally require('vm2') reg…
CVE-2025-3466High7.22025-07-07langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions…
CVE-2024-9612Medium6.52025-03-20In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be…
All CVEs classified under CWE-1100 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-44008Critical9.82026-05-13vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with objects from the other side but can call i…
CVE-2026-44007Critical9.12026-05-13vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created with nesting: true, sandbox code can unconditionally require('vm2') reg…
CVE-2025-3466High7.22025-07-07langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions…
CVE-2024-9612Medium6.52025-03-20In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be…