Known Vulnerabilities for Sandbox-runtime by Anthropic-experimental
Listed below are 10 of the newest known vulnerabilities associated with "Sandbox-runtime" by "Anthropic-experimental".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-101258 json | A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER san... | Not Provided | 2026-10-06 | 2026-10-15 |
| CVE-2026-100552 json | OpenClaw (npm package 'openclaw') before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runt... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-94603 json | Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying ... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-93985 json | OpenPanel js-runtime through 2.3.0 contains a sandbox escape vulnerability in the JavaScript webhook template validator that ... | Not Provided | 2026-09-19 | 2026-10-02 |
| CVE-2026-92938 json | vm2 versions 3.11.3 through 3.11.6 expose Node.js's host node:sqlite module to code running in NodeVM when that builtin is pe... | Not Provided | 2026-09-17 | 2026-09-19 |
| CVE-2026-92129 json | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-90648 json | wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, a... | Not Provided | 2026-09-13 | 2026-09-14 |
| CVE-2026-81719 json | openssl_encrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy d... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-70471 json | Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise i... | Not Provided | 2026-08-04 | 2026-08-04 |
| CVE-2026-62146 json | A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own r... | Not Provided | 2026-09-30 | 2026-09-30 |