A vulnerability identified as critical has been detected in patriksimek vm2 up to 3.10.x. This affects the function
BaseHandler.getPrototypeOf. This manipulation causes code injection.
This vulnerability appears as CVE-2026-44006. The attack may be initiated remotely. There is no available exploit.
You should upgrade the affected component.
