CVE-2026-44008 | patriksimek vm2 up to 3.11.1 neutralizeArraySpeciesBatch exposure of resource (GHSA-9qj6-qjgg-37qq)

A vulnerability labeled as critical has been found in patriksimek vm2 up to 3.11.1. This vulnerability affects the function neutralizeArraySpeciesBatch. Such manipulation leads to exposure of resource.

This vulnerability is traded as CVE-2026-44008. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.