{"api_version":"v1","generated_at":"2026-10-08T22:15:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-publisher-not-identified-vm2-cf2ce685205d","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/vm2","name":"vm2","next_cursor":null,"observations":[{"affected":"unspecified < 3.9.10","affected_versions_present":true,"cve_id":"CVE-2022-25893","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-25893","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-15T19:18:16.546Z","patch_url":"https://security.snyk.io/vuln/SNYK-JS-VM2-2990237","primary_source":"","published":"2022-12-21T23:14:33.786Z"},{"affected":"unspecified < 3.6.11","affected_versions_present":true,"cve_id":"CVE-2019-10761","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-10761","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-16T16:28:51.372Z","patch_url":"https://github.com/patriksimek/vm2/commit/4b22d704e4794af63a5a2d633385fd20948f6f90","primary_source":"","published":"2022-07-13T08:20:14.533Z"},{"affected":"unspecified < 3.9.6","affected_versions_present":true,"cve_id":"CVE-2021-23555","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-23555","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-16T17:23:55.888Z","patch_url":"https://snyk.io/vuln/SNYK-JS-VM2-2309905","primary_source":"","published":"2022-02-11T20:00:14.189Z"},{"affected":"unspecified < 3.9.4","affected_versions_present":true,"cve_id":"CVE-2021-23449","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-23449","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-17T01:46:09.662Z","patch_url":"https://github.com/patriksimek/vm2/commit/b4f6e2bd2c4a1ef52fc4483d8e35f28bc4481886","primary_source":"","published":"2021-10-18T16:40:13.749Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Publisher not identified"}}