Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-a4df-8ba1-1b3b
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-a4df-8ba1-1b3b.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-a4df-8ba1-1b3b
Upstream
CVE-2026-44009
GHSA-9vg3-4rfj-wgcm
Published
2026-05-26T13:52:48.728Z
Modified
2026-07-19T18:23:34.557355680Z
Summary
[none]
Details
References
https://advisory.echohq.com/cve/CVE-2026-44009
https://github.com/patriksimek/vm2/security/advisories/GHSA-9vg3-4rfj-wgcm
https://github.com/patriksimek/vm2/releases/tag/v3.11.2
https://nvd.nist.gov/vuln/detail/CVE-2026-44009
https://github.com/advisories/GHSA-9vg3-4rfj-wgcm
Affected packages
Echo:npm
/
vm2
Package
Name
vm2
Purl
pkg:npm/vm2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
3.11.0+echo.1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-a4df-8ba1-1b3b.json"
ECHO-a4df-8ba1-1b3b - OSV