{"vulnerability": "cve-2026-47698", "sightings": [{"uuid": "b1c020b5-d530-4ba3-a545-52125e9d040e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47698", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcjmnli3k24", "content": "CVE-2026-47698 - vm2\nThe vm2 sandboxing system has a security weakness that allows attackers to write code that can break free from the sandbox and execute malicious commands on the host system. This means that if\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #npm #CVE #infosec", "creation_timestamp": "2026-08-17T20:20:04.499314Z"}, {"uuid": "434cb4a0-9046-488d-b179-8da43dfa3e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-47698", "type": "published-proof-of-concept", "source": "https://github.com/patriksimek/vm2/security/advisories/GHSA-cfcw-xp6x-25gj", "content": "", "creation_timestamp": "2026-08-17T20:35:07.324167Z"}, {"uuid": "1708a196-22fd-4914-ba1d-1c54d79d5303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47698", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcpo6ihbu2p", "content": "\ud83d\udea8 CVE-2026-47698 \u2014 CVSS 9.8 CRITICAL\n\nvm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47698\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T22:08:18.051088Z"}]}