Critical vm2 sandbox escape flaw uncovered, patch ASAP! (CVE-2022-36067)Help Net Security·Apr 24, 13:36 UTC · Apr 24, 2023VulnerabilityCVE-2022-3606760
Week in review: 3FA, Fortinet firewalls under attack, and the riskiest connected devicesHelp Net Security·Oct 16, 00:00 UTC · Oct 16, 2022Exploit / PoC in the wildCVE-2022-41033CVE-2022-40684CVE-2022-36067+1 CVEs160
Researchers Detail Critical RCE Flaw Reported in Popular vm2 JavaScript SandboxThe Hacker News·Oct 11, 11:28 UTC · Oct 11, 2022VulnerabilityCVE-2022-3606760
Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code ExecutionThe Hacker News·Jan 29, 06:05 UTC · Jan 29, 2026VulnerabilityCVE-2026-22709CVE-2022-36067CVE-2023-29017+5 CVEs160
Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code ExecutionThe Hacker News·Apr 20, 04:45 UTC · Apr 20, 2023VulnerabilityCVE-2023-29199CVE-2023-30547CVE-2023-29017+1 CVEs60
Researchers disclose sandbox escape bug in vm2 sandbox librarySecurity Affairs·Apr 9, 20:34 UTC · Apr 9, 2023Exploit / PoCCVE-2023-29017CVE-2022-3606760
Researchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox LibraryThe Hacker News·Apr 8, 07:06 UTC · Apr 8, 2023VulnerabilityCVE-2023-29017CVE-2022-3606760
Experts found critical RCE in Spotify’s BackstageSecurity Affairs·Nov 15, 22:23 UTC · Nov 15, 2022VulnerabilityCVE-2022-3606760
Critical RCE Flaw Reported in Spotify's Backstage Software Catalog and Developer PlatformThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2022VulnerabilityCVE-2022-3606760