Security

Scams, exploits, phishing campaigns, wallet drains, and security fixes — plus the changes and tools that help users stay safer in crypto.
Dozen critical vm2 flaws allow sandbox escape

Dozen critical vm2 flaws allow sandbox escape

A dozen critical vulnerabilities in the vm2 Node.js library let attackers escape the sandbox and run arbitrary code. Users are urged to upgrade to vm2 3.11.2. Disclosed May 7, 2026.