Description
Note: The npm package has moved to @enclave-vm/core (formerly enclave-vm).
All fixed versions and guidance refer to @enclave-vm/core.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 2.7.0
References
Related Issues
- Sandbox escape via infinite recursion and error objects - @enclave-vm/core - CVE-2026-25533
- enclave-vm Vulnerable to Sandbox Escape via Host Error Prototype Chain - CVE-2026-22686
- Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer - CVE-2026-41680
- OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment - CVE-2026-41900
You might also like:
- Tags:
- npm
- enclave-vm
Anything's wrong? Let us know Last updated on February 07, 2026