
Dozen critical vm2 flaws allow sandbox escape
A dozen critical vulnerabilities in the vm2 Node.js library let attackers escape the sandbox and run arbitrary code. Users are urged to upgrade to vm2 3.11.2. Disclosed May 7, 2026.

Dozen critical vm2 flaws allow sandbox escape
A dozen critical vulnerabilities in the vm2 Node.js library let attackers escape the sandbox and run arbitrary code. Users are urged to upgrade to vm2 3.11.2. Disclosed May 7, 2026.