If you discover a security vulnerability within PocolVM, please send an email to the maintainers.

• Type of vulnerability
• Full paths of source file(s) related to the vulnerability
• Location of the affected source code
• Any special configuration required to reproduce the issue
• Step-by-step instructions to reproduce the issue
• Impact of the issue

• Initial Response: Within 48 hours
• Status Update: Within 7 days
• Resolution: Within 30 days

JIT requires executable memory allocation which may be restricted by security policies.

• VM uses manual memory management
• No bounds checking on array accesses
• Validate all inputs

System calls provide direct access to host file system.

1. Only execute programs from trusted sources
2. Use instruction limits for long-running programs
3. Use debugger for development
4. Keep VM updated

Last updated: February 2026