Critical vm2 Sandbox Vulnerability in Node.js Lets Attackers Run Untrusted Code

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical vm2 Vulnerability in Node.js Allows Code Execution A critical vulnerability in the vm2 sandboxing library for Node.js has been identified, enabling attackers to escape the sandbox and execute arbitrary code on affected systems. This flaw poses a significant risk to applications utilizing the vm2 library, which is widely used for running untrusted code securely. 13 sources 45