SCA: security update for vm2 (GHSA-v836-6xw4-9cx3)

high Tenable Cloud Security Plugin ID 446017

Description

vm2 has Memory Exhaustion DoS via bufferAllocLimit Bypass

Solution

Update the vm2 library and its related packages to version 3.11.6 or later.

See Also

https://github.com/advisories/GHSA-v836-6xw4-9cx3

Plugin Details

Severity: High

ID: 446017

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 8/17/2026

Updated: 8/17/2026

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 8/17/2026

Vulnerability Publication Date: 8/17/2026

Reference Information

cwe: CWE-770