Known vulnerabilities in Red Hat Self-service automation portal 2

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-44005	vm2 is an open source vm/sandbox for Node.js	10.0 Critical	May 13, 2026
CVE-2026-45411	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 13, 2026
CVE-2026-44009	vm2: Sandbox Breakout Through Null Proto Exception	9.8 Critical	May 13, 2026
CVE-2026-44008	vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`	9.8 Critical	May 13, 2026
CVE-2026-44007	vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution	9.1 Critical	May 13, 2026
CVE-2026-44006	vm2 is an open source vm/sandbox for Node.js	10.0 Critical	May 13, 2026
CVE-2026-43999	vm2 is an open source vm/sandbox for Node.js	9.9 Critical	May 13, 2026
CVE-2026-43997	vm2 is an open source vm/sandbox for Node.js	10.0 Critical	May 13, 2026
CVE-2026-26956	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-26332	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-24120	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-24118	vm2 is an open source vm/sandbox for Node.js	9.8 Critical	May 4, 2026
CVE-2026-41242	protobufjs compiles protobuf definitions into JavaScript (JS) functions	9.4 Critical	Apr 18, 2026
CVE-2026-25896	fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based…	9.3 Critical	Feb 20, 2026
CVE-2026-1615	Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of…	9.8 Critical	Feb 9, 2026

Other Red Hat products