Skip to main content
Components
Vulnerabilities
Pricing
MCP
API
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
software.amazon.awscdk/cdk-asset-node-prox… | Sonatype Guide
Get full component data and automated fixes with Sonatype Guide.
Sign up for free
maven
software.amazon.awscdk
cdk-asset-node-proxy-agent-v5
2.0.166
cdk-asset-node-proxy-agent-v5 2.0.166
Latest
software.amazon.awscdk
Published
Jul 20, 2023
•
Policy
compliance
maven Registry
Developer Trust Score
Recommended Version:
x.y.z
Recommended upgrade that meets your policy.
Compare Versions
Overview
Overview
Versions
167
Versions
167
Vulnerabilities
13
Vulnerabilities
13
Dependencies
4
Dependencies
4
Reset filters
Severity
Critical
(6)
High
(0)
Medium
(0)
Low
(0)
CVSS Score
0.0
10.0
EPSS Score
0.0
1.0
Malware
KEV Status
Published
Filter
Sort: Published (Newest first)
9.3
CVE-2026-24781
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability through the inspect function. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This issue has been patched in version 3.11.0.
affected
Severity
Critical
Published
May 6, 2026
10.0
CVE-2026-26332
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, SuppressedError allows attackers to escape the sandbox and run arbitrary code. This issue has been patched in version 3.11.0.
affected
Severity
Critical
Published
May 5, 2026
9.3
CVE-2026-24118
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This issue has been patched in version 3.11.0.
affected
Severity
Critical
Published
May 5, 2026
9.8
CVE-2023-42282
The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.
affected
Severity
Critical
Published
Feb 12, 2024
9.3
sonatype-2023-3090
vm2 - Protection Mechanism Failure [CVE-2023-37903]
affected
Severity
Critical
Published
Jul 14, 2023
9.8
sonatype-2023-3071
vm2 - Remote Code Execution (RCE)
affected
Severity
Critical
Published
Jul 14, 2023
