Advisories · Weakness

CWE-265.

Every Advisory and CVE whose sources give the weakness CWE-265, newest first.

CVE-2026-116367 CVE record

CVSS 5.3 Medium

DeepSeek Harness sandbox.ts createContext
- DeepSeek Harness
- CWE-264
- CWE-265
Not analysed yet 26 Oct 2026
CVE-2026-108788 CVE record

CVSS 4.8 Medium

deepseek-ai deepseek-harness Sandbox spawn sandbox
- deepseek-ai deepseek-harness
- CWE-264
- CWE-265
Not analysed yet 12 Oct 2026
CVE-2026-101102 CVE record

CVSS 5.3 Medium

deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox
- deepseek-ai deepseek-harness
- CWE-264
- CWE-265
Not analysed yet 28 Sept 2026
CVE-2026-18593 CVE record

CVSS 6.3 Medium

vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox
- vxcontrol PentAGI
- CWE-264
- CWE-265
Not analysed yet 3 Aug 2026
CVE-2026-14784 CVE record

CVSS 5.3 Medium

vxcontrol PentAGI Docker API client.go sandbox
- vxcontrol PentAGI
- CWE-264
- CWE-265
Not analysed yet 6 Jul 2026
hermes-agent PyPI

CVSS 6.9 Medium

hermes-agent has a sandbox issue
- Privilege escalation
- CWE-264
<0.11.0 · fixed in 0.11.0

GHSA-wm96-9gfh-vvgq · CVE-2026-9368 Not analysed yet 26 May 2026
verl PyPI

CVSS 6.3 Medium

verl's math_equal() Vulnerable to Arbitrary Code Execution via Unsafe eval()
- Code injection
- CWE-264
<=0.7.1 · no fixed version yet

GHSA-h57c-v2v3-5v3v · CVE-2026-6878 Not analysed yet 23 Apr 2026
CVE-2026-6224 CVE record

CVSS 6.9 Medium

nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox
- nocobase plugin-workflow-javascript
- CWE-264
- CWE-265
Not analysed yet 13 Apr 2026
CVE-2026-6117 CVE record

CVSS 5.3 Medium

AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox
- AstrBot
- CWE-264
- CWE-265
Not analysed yet 12 Apr 2026
CVE-2025-5874 CVE record

CVSS 2.1 Low

Redash getattr python.py run_query sandbox
- Redash
- CWE-264
- CWE-265
Not analysed yet 9 Jun 2025
aim PyPI

CVSS 5.3 Medium

Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution
- Code injection
- CWE-264
<=3.29.1 · no fixed version yet

GHSA-gp5h-f9c5-8355 · CVE-2025-5321 Not analysed yet 29 May 2025
CVE-2024-2007 CVE record

CVSS 5.3 Medium

OpenBMB XAgent Privileged Mode sandbox
- OpenBMB XAgent
- CWE-265
Not analysed yet 29 Feb 2024
CVE-2023-5223 CVE record

CVSS 6.3 Medium

HimitZH HOJ Topic sandbox
- HimitZH HOJ
- CWE-265
Not analysed yet 27 Sept 2023
safe-eval npm

CVSS 8.8 High

safe-eval vulnerable to Sandbox Bypass due to improper input sanitization
- Prototype pollution
- CWE-265
<=0.4.2 · no fixed version yet

GHSA-79xf-67r4-q2jj · CVE-2023-26122 Not analysed yet 11 Apr 2023
CVE-2020-1889 CVE record

Facebook WhatsApp Desktop: A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could…
- Facebook WhatsApp Desktop
- CWE-265
Not analysed yet 3 Sept 2020