Threats Tagged 'cwe-237'
View all threats tagged with 'cwe-237'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cwe-237'
Click on any threat for detailed analysis and mitigation recommendations
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a host exception using the yield* expression inside an async generator. When the generator is closed using the return function, the value is awaited on and exceptions thrown in the then call will be caught by the runtime and passed to the yield* iterator as the next value. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This vulnerability is fixed in 3.11.3. Join the discussion | CVE Database V5 | 05/13/2026, 17:38:38 UTC Added: 05/13/2026, 17:51:34 UTC |
CVE-2025-47914 is a medium severity vulnerability in the golang.org/x/crypto/ssh/agent package where SSH Agent servers do not validate message sizes when processing new identity requests. This can cause the program to panic due to an out of bounds read if a malformed message is received. Join the discussion | CVE Database V5 | 11/19/2025, 20:33:43 UTC Added: 11/19/2025, 20:43:01 UTC |
Showing 1 to 2 of 2 results