# CWE-693. Every Advisory and CVE whose sources give the weakness CWE-693, newest first. ## Records, newest first (an older page) - [vm2 allows a sandboxed plugin to execute native code through \`node:sqlite\`](https://agentprime.io/advisories/GHSA-6w8r-xxw2-g3hx.md) `GHSA-6w8r-xxw2-g3hx`, `CVE-2026-92938` · npm `vm2`: affected `>=3.11.3, <3.11.7`, fixed in `3.11.7` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-693 - [vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector](https://agentprime.io/advisories/GHSA-27g9-p43v-cw3v.md) `GHSA-27g9-p43v-cw3v`, `CVE-2026-92944` · npm `vm2`: affected `>=3.10.2, <3.11.7`, fixed in `3.11.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-693, CWE-913 - [Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders](https://agentprime.io/advisories/GHSA-4hqw-qxg8-jxx2.md) `GHSA-4hqw-qxg8-jxx2`, `CVE-2026-101900` · npm `axios`: affected `>=1.12.0, <1.20.0`, fixed in `1.20.0` · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Other injection, Prototype pollution, CWE-693 - [Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges](https://agentprime.io/advisories/GHSA-44g4-m2mj-wpvx.md) `GHSA-44g4-m2mj-wpvx`, `CVE-2026-101899` · npm `axios`: affected `>=1.15.0, <1.20.0`, fixed in `1.20.0` · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-693 - [Apache WSS4J: WS-SecurityPolicy signature checks skipped in the streaming code after an STR-Transform reference](https://agentprime.io/advisories/CVE-2026-92121.md) `CVE-2026-92121` · CVE record: Apache Software Foundation Apache WSS4J · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-693 - [Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab](https://agentprime.io/advisories/GHSA-hq2x-r82h-9wj4.md) `GHSA-hq2x-r82h-9wj4`, `CVE-2026-102673` · npm `electron`: affected `<41.10.4 || >=42.0.0-alpha.1, <42.5.2 || >=43.0.0-alpha.1, <43.0.0`, fixed in `41.10.4`, `42.5.2`, `43.0.0` · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-346, CWE-693 - [Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions](https://agentprime.io/advisories/GHSA-gr2m-v5gq-v685.md) `GHSA-gr2m-v5gq-v685`, `CVE-2026-102674` · npm `electron`: affected `<41.10.6 || >=42.0.0-alpha.1, <42.9.2 || >=43.0.0-alpha.1, <43.4.1 || >=44.0.0-alpha.1, <44.0.0-beta.5`, fixed in `41.10.6`, `42.9.2`, `43.4.1`, `44.0.0-beta.5` · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Privilege escalation, CWE-693 - [Mitigation bypass in the DOM: Security component](https://agentprime.io/advisories/CVE-2026-100829.md) `CVE-2026-100829` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-693 - [Mitigation bypass in the Bookmarks & History component](https://agentprime.io/advisories/CVE-2026-100828.md) `CVE-2026-100828` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-693 - [Mitigation bypass in the DOM: Service Workers component](https://agentprime.io/advisories/CVE-2026-100808.md) `CVE-2026-100808` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-693 - [Sandbox escape in the Graphics component](https://agentprime.io/advisories/CVE-2026-100775.md) `CVE-2026-100775` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-693 - [Sandbox escape in the Security: Process Sandboxing component](https://agentprime.io/advisories/CVE-2026-100760.md) `CVE-2026-100760` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-693 - [stoatchat before 0.15.5 Local Filesystem Read via SVG](https://agentprime.io/advisories/CVE-2026-100676.md) `CVE-2026-100676` · CVE record: stoatchat stoatchat · CVSS 8.8 High · Not analysed yet · Published 26 Sept 2026 · Tags: CWE-693 - [InvoicePlane: Remote Code Execution via Writable Templates Directory](https://agentprime.io/advisories/CVE-2026-39353.md) `CVE-2026-39353` · CVE record: InvoicePlane InvoicePlane · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2026 · Tags: File inclusion, Broken access control, CWE-693 - [Paid Member Subscriptions < 3.1.0 - Unauthenticated reCAPTCHA Bypass via Registration Form](https://agentprime.io/advisories/CVE-2026-90950.md) `CVE-2026-90950` · CVE record: Unknown Paid Membership Subscriptions · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-693 - [Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource](https://agentprime.io/advisories/CVE-2026-94251.md) `CVE-2026-94251` · CVE record: Apache Software Foundation Apache Sling Security Bundle · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-693 - [Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-91796.md) `CVE-2026-91796` · CVE record: Foxit Software Inc. Foxit PDF Editor and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-693 - [MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)](https://agentprime.io/advisories/GHSA-w66g-j6c4-hcfc.md) `GHSA-w66g-j6c4-hcfc`, `CVE-2026-77251`, `PYSEC-2026-4102` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 8.3 High · Not analysed yet · Published 22 Sept 2026 · Tags: Broken access control, CWE-184, CWE-693, CWE-1276 - [Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog](https://agentprime.io/advisories/CVE-2026-85288.md) `CVE-2026-85288` · CVE record: notepad-plus-plus notepad-plus-plus · CVSS 6.7 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Command injection, CWE-345, CWE-693 - [k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers](https://agentprime.io/advisories/GHSA-jhjp-4c2q-xmx4.md) `GHSA-jhjp-4c2q-xmx4`, `GO-2026-6538` · Go `github.com/falcosecurity/plugins/plugins/k8saudit` and 4 more: affected `<0.18.0`, fixed in `0.18.0` · CVSS 4.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-693 - [MaxKB function-library sandbox escape: dlopen stack-check bypass via importlib meta-path callbacks and unhooked dlsym(RTLD_NEXT)](https://agentprime.io/advisories/CVE-2026-79919.md) `CVE-2026-79919` · CVE record: 1Panel-dev MaxKB · CVSS 6.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-693 - [MaxKB: Sandbox escape via unhooked fexecve](https://agentprime.io/advisories/CVE-2026-79918.md) `CVE-2026-79918` · CVE record: 1Panel-dev MaxKB · CVSS 6.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-693 - [Duplicate Advisory: vm2 contains a sandbox escape vulnerability](https://agentprime.io/advisories/GHSA-9hxx-m5g2-2q3h.md) `GHSA-9hxx-m5g2-2q3h` · npm `vm2`: affected `<3.12.1`, fixed in `3.12.1` · CVSS 10.0 Critical · Withdrawn · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-693 - [vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species](https://agentprime.io/advisories/CVE-2026-93606.md) `CVE-2026-93606` · CVE record: patriksimek vm2 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-693 - [WP Ghost (Hide My WP Ghost) < 7.0.11 - Unauthenticated URL Hiding Bypass via Loopback Compatibility Check](https://agentprime.io/advisories/CVE-2026-86800.md) `CVE-2026-86800` · CVE record: Unknown Hide My WP Ghost · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-693 - [WP Ghost (Hide My WP Ghost) 7.0.10 - Unauthenticated Firewall, Threat Detection and URL Hiding Bypass via WooCommerce Request Parameters](https://agentprime.io/advisories/CVE-2026-86796.md) `CVE-2026-86796` · CVE record: Unknown Hide My WP Ghost · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-693 - [mport audit can inspect the wrong package when options are present](https://agentprime.io/advisories/CVE-2026-54577.md) `CVE-2026-54577` · CVE record: MidnightBSD mport · CVSS 2.0 Low · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-20, CWE-693 - [Zope AccessControl vulnerable to information disclosure through Python string \`format\` and \`format_map\` functions](https://agentprime.io/advisories/GHSA-pq59-9fq7-m886.md) `GHSA-pq59-9fq7-m886`, `CVE-2026-77401`, `PYSEC-2026-4022` · PyPI `accesscontrol`: affected `<7.4`, fixed in `7.4` · CVSS 6.8 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-693 - [RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution](https://agentprime.io/advisories/GHSA-hp3v-5vw7-fx9w.md) `GHSA-hp3v-5vw7-fx9w`, `CVE-2026-76825`, `PYSEC-2026-4161` · PyPI `restrictedpython`: affected `<8.4`, fixed in `8.4` · CVSS 8.4 High · Not analysed yet · Published 17 Sept 2026 · Tags: Information disclosure, Code injection, Memory corruption, CWE-693 - [Duplicate Advisory: \`allowAsync: false\` can be bypassed through Promise thenable assimilation in VM and NodeVM](https://agentprime.io/advisories/GHSA-9538-79j2-h62h.md) `GHSA-9538-79j2-h62h` · npm `vm2`: affected `<=3.11.7`, no fixed version yet · CVSS 7.1 High · Withdrawn · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-693 - [Duplicate Advisory: vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass](https://agentprime.io/advisories/GHSA-538q-xxpg-6h4r.md) `GHSA-538q-xxpg-6h4r` · npm `vm2`: affected `>=3.10.1, <=3.11.6`, no fixed version yet · CVSS 10.0 Critical · Withdrawn · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-693 - [Duplicate Advisory: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape](https://agentprime.io/advisories/GHSA-wqg3-r97q-73xm.md) `GHSA-wqg3-r97q-73xm` · npm `vm2`: affected `>=3.9.6, <=3.11.6`, no fixed version yet · CVSS 9.9 Critical · Withdrawn · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-693 - [Duplicate Advisory: vm2 3.11.6 allows a sandboxed plugin to execute native code through \`node:sqlite\`](https://agentprime.io/advisories/GHSA-m7cq-7f2q-f9fh.md) `GHSA-m7cq-7f2q-f9fh` · npm `vm2`: affected `>=3.11.3, <=3.11.6`, no fixed version yet · CVSS 9.9 Critical · Withdrawn · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-693 - [Duplicate Advisory: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector](https://agentprime.io/advisories/GHSA-hwr5-cm8v-c76q.md) `GHSA-hwr5-cm8v-c76q` · npm `vm2`: affected `>=3.10.2, <=3.11.6`, no fixed version yet · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-693 - [Duplicate Advisory: vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit](https://agentprime.io/advisories/GHSA-4xmw-hh9q-4q7c.md) `GHSA-4xmw-hh9q-4q7c` · npm `vm2`: affected `<=3.11.7`, no fixed version yet · CVSS 9.0 Critical · Withdrawn · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-693 - [CMAK through 3.0.0.6 Feature Gate Bypass via HTML Form Routes](https://agentprime.io/advisories/CVE-2026-92778.md) `CVE-2026-92778` · CVE record: yahoo CMAK · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-693 - [Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Protection Mechanism Failure Vulnerabilit…](https://agentprime.io/advisories/CVE-2026-20331.md) `CVE-2026-20331` · CVE record: Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and 2 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Jenkins Project Jenkins Script Security Plugin](https://agentprime.io/advisories/CVE-2026-92129.md) `CVE-2026-92129` · CVE record: Jenkins Project Jenkins Script Security Plugin · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Jenkins Project Jenkins Script Security Plugin](https://agentprime.io/advisories/CVE-2026-92124.md) `CVE-2026-92124` · CVE record: Jenkins Project Jenkins Script Security Plugin · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Jenkins Project Jenkins Script Security Plugin](https://agentprime.io/advisories/CVE-2026-92123.md) `CVE-2026-92123` · CVE record: Jenkins Project Jenkins Script Security Plugin · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Jenkins Project Jenkins Script Security Plugin](https://agentprime.io/advisories/CVE-2026-92122.md) `CVE-2026-92122` · CVE record: Jenkins Project Jenkins Script Security Plugin · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-693 - [An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file…](https://agentprime.io/advisories/CVE-2026-79298.md) `CVE-2026-79298` · CVE record · CVSS 8.4 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58767.md) `CVE-2026-58767` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58766.md) `CVE-2026-58766` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58765.md) `CVE-2026-58765` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58755.md) `CVE-2026-58755` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58747.md) `CVE-2026-58747` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58726.md) `CVE-2026-58726` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58704.md) `CVE-2026-58704` · CVE record: Google Android · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 15 Sept 2026 · Tags: Broken access control, CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58678.md) `CVE-2026-58678` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-57012.md) `CVE-2026-57012` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-57006.md) `CVE-2026-57006` · CVE record: Google Android · CVSS 4.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-56982.md) `CVE-2026-56982` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-56979.md) `CVE-2026-56979` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-56973.md) `CVE-2026-56973` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-56970.md) `CVE-2026-56970` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-56941.md) `CVE-2026-56941` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-56881.md) `CVE-2026-56881` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-55366.md) `CVE-2026-55366` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-55359.md) `CVE-2026-55359` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .