Advisories · Weakness
CWE-693.
Every Advisory and CVE whose sources give the weakness CWE-693, newest first.
- CVSS 9.4 CriticalCritical · CVSS 9+
vm2 allows a sandboxed plugin to execute native code through `node:sqlite`
- CWE-693
>=3.11.3, <3.11.7 · fixed in 3.11.7
GHSA-6w8r-xxw2-g3hx · CVE-2026-92938 - CVSS 9.3 CriticalCritical · CVSS 9+
vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector
- CWE-693
- CWE-913
>=3.10.2, <3.11.7 · fixed in 3.11.7
GHSA-27g9-p43v-cw3v · CVE-2026-92944 - CVSS 6.9 Medium
Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders
- Other injection
- Prototype pollution
>=1.12.0, <1.20.0 · fixed in 1.20.0
GHSA-4hqw-qxg8-jxx2 · CVE-2026-101900 - CVSS 6.9 Medium
Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges
- CWE-693
>=1.15.0, <1.20.0 · fixed in 1.20.0
GHSA-44g4-m2mj-wpvx · CVE-2026-101899 - CVSS 7.5 High
Apache WSS4J: WS-SecurityPolicy signature checks skipped in the streaming code after an STR-Transform reference
- Apache Software Foundation Apache WSS4J
- CWE-693
- CVSS 8.2 High
Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab
- CWE-346
- CWE-693
<41.10.4 || >=42.0.0-alpha.1, <42.5.2 || >=43.0.0-alpha.1, <43.0.0 · fixed in 41.10.4, 42.5.2, 43.0.0
GHSA-hq2x-r82h-9wj4 · CVE-2026-102673 - CVSS 8.2 High
Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions
- Privilege escalation
- CWE-693
<41.10.6 || >=42.0.0-alpha.1, <42.9.2 || >=43.0.0-alpha.1, <43.4.1 || >=44.0.0-alpha.1, <44.0.0-beta.5 · fixed in 41.10.6, 42.9.2, 43.4.1, 44.0.0-beta.5
GHSA-gr2m-v5gq-v685 · CVE-2026-102674 - CVSS 9.6 CriticalCritical · CVSS 9+
Mitigation bypass in the DOM: Security component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
- CVSS 9.6 CriticalCritical · CVSS 9+
Mitigation bypass in the Bookmarks & History component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
- CVSS 8.8 High
Mitigation bypass in the DOM: Service Workers component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
- CVSS 9.6 CriticalCritical · CVSS 9+
Sandbox escape in the Graphics component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
- CVSS 9.6 CriticalCritical · CVSS 9+
Sandbox escape in the Security: Process Sandboxing component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
- CVSS 8.8 High
stoatchat before 0.15.5 Local Filesystem Read via SVG
- stoatchat
- CWE-693
- CVSS 9.1 CriticalCritical · CVSS 9+
InvoicePlane: Remote Code Execution via Writable Templates Directory
- InvoicePlane
- File inclusion
- Broken access control
- CVSS 5.3 Medium
Paid Member Subscriptions < 3.1.0 - Unauthenticated reCAPTCHA Bypass via Registration Form
- Paid Membership Subscriptions
- CWE-693
- CVSS 6.5 Medium
Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource
- Apache Software Foundation Apache Sling Security Bundle
- CWE-693
- CVSS 6.1 Medium
Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability
- Foxit Software Inc. Foxit PDF Editor
- Foxit Software Inc. Foxit PDF Reader
- CWE-693
- CVSS 8.3 High
MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)
- Broken access control
- CWE-184
<0.22.0 · fixed in 0.22.0
GHSA-w66g-j6c4-hcfc · CVE-2026-77251 - CVSS 6.7 Medium
Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog
- notepad-plus-plus
- Command injection
- CWE-345
- CVSS 4.3 Medium
k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers
- CWE-693
<0.18.0 · fixed in 0.18.0
GHSA-jhjp-4c2q-xmx4 - CVSS 6.3 Medium
MaxKB function-library sandbox escape: dlopen stack-check bypass via importlib meta-path callbacks and unhooked dlsym(RTLD_NEXT)
- 1Panel-dev MaxKB
- CWE-693
- CVSS 6.3 Medium
MaxKB: Sandbox escape via unhooked fexecve
- 1Panel-dev MaxKB
- CWE-693
- CVSS 10.0 Critical
Duplicate Advisory: vm2 contains a sandbox escape vulnerability
- CWE-693
<3.12.1 · fixed in 3.12.1
GHSA-9hxx-m5g2-2q3h - CVSS 10.0 CriticalCritical · CVSS 9+
vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species
- patriksimek vm2
- CWE-693
- CVSS 5.3 Medium
WP Ghost (Hide My WP Ghost) < 7.0.11 - Unauthenticated URL Hiding Bypass via Loopback Compatibility Check
- Hide My WP Ghost
- CWE-693
- CVSS 5.3 Medium
WP Ghost (Hide My WP Ghost) 7.0.10 - Unauthenticated Firewall, Threat Detection and URL Hiding Bypass via WooCommerce Request Parameters
- Hide My WP Ghost
- CWE-693
- CVSS 2.0 Low
mport audit can inspect the wrong package when options are present
- MidnightBSD mport
- CWE-20
- CWE-693
- CVSS 6.8 Medium
Zope AccessControl vulnerable to information disclosure through Python string `format` and `format_map` functions
- CWE-693
<7.4 · fixed in 7.4
GHSA-pq59-9fq7-m886 · CVE-2026-77401 - CVSS 8.4 High
RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution
- Information disclosure
- Code injection
<8.4 · fixed in 8.4
GHSA-hp3v-5vw7-fx9w · CVE-2026-76825 - CVSS 7.1 High
Duplicate Advisory: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM
- CWE-693
<=3.11.7 · no fixed version yet
GHSA-9538-79j2-h62h - CVSS 10.0 Critical
Duplicate Advisory: vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass
- CWE-693
>=3.10.1, <=3.11.6 · no fixed version yet
GHSA-538q-xxpg-6h4r - CVSS 9.9 Critical
Duplicate Advisory: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape
- CWE-693
>=3.9.6, <=3.11.6 · no fixed version yet
GHSA-wqg3-r97q-73xm - CVSS 9.9 Critical
Duplicate Advisory: vm2 3.11.6 allows a sandboxed plugin to execute native code through `node:sqlite`
- CWE-693
>=3.11.3, <=3.11.6 · no fixed version yet
GHSA-m7cq-7f2q-f9fh - CVSS 9.8 Critical
Duplicate Advisory: vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector
- CWE-693
>=3.10.2, <=3.11.6 · no fixed version yet
GHSA-hwr5-cm8v-c76q - CVSS 9.0 Critical
Duplicate Advisory: vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit
- CWE-693
<=3.11.7 · no fixed version yet
GHSA-4xmw-hh9q-4q7c - CVSS 5.3 Medium
CMAK through 3.0.0.6 Feature Gate Bypass via HTML Form Routes
- yahoo CMAK
- CWE-693
- CVSS 9.6 CriticalCritical · CVSS 9+
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Protection Mechanism Failure Vulnerabilit…
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- Cisco Secure Firewall Management Center (FMC)
- CWE-693
- CVSS 7.5 High
Protection mechanism failure in Jenkins Project Jenkins Script Security Plugin
- Jenkins Project Jenkins Script Security Plugin
- CWE-693
- CVSS 8.8 High
Protection mechanism failure in Jenkins Project Jenkins Script Security Plugin
- Jenkins Project Jenkins Script Security Plugin
- CWE-693
- CVSS 8.8 High
Protection mechanism failure in Jenkins Project Jenkins Script Security Plugin
- Jenkins Project Jenkins Script Security Plugin
- CWE-693
- CVSS 8.8 High
Protection mechanism failure in Jenkins Project Jenkins Script Security Plugin
- Jenkins Project Jenkins Script Security Plugin
- CWE-693
- CVSS 8.4 High
An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file…
- CWE-693
- CVSS 6.7 Medium
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 7.8 High
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 6.7 Medium
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 6.7 Medium
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 6.7 Medium
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 6.7 Medium
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 8.8 HighCritical · KEVKEV
Protection mechanism failure in Google Android
- Google Android
- Broken access control
- CWE-693
- CVSS 7.8 High
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 8.4 High
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 4.4 Medium
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 7.8 High
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 6.7 Medium
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 6.7 Medium
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 8.4 High
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 8.4 High
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 8.4 High
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 9.8 CriticalCritical · CVSS 9+
Protection mechanism failure in Google Android
- Google Android
- CWE-693
- CVSS 7.8 High
Protection mechanism failure in Google Android
- Google Android
- CWE-693