The Hacker News·Jan 29, 2026 criticalCritical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution#cve-2026-22709#cve-2022-36067#cve-2023-29017 2 min1
Help Net Security·Apr 24, 2023 criticalCritical vm2 sandbox escape flaw uncovered, patch ASAP! (CVE-2022-36067)#cve-2022-36067#vulnerability 3 min
The Hacker News·Apr 20, 2023 criticalCritical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution#cve-2023-29199#cve-2023-30547#cve-2023-290172
Security Affairs·Apr 9, 2023 criticalResearchers disclose sandbox escape bug in vm2 sandbox library#cve-2023-29017#cve-2022-36067#exploit1
The Hacker News·Apr 8, 2023 criticalResearchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox Library#cve-2023-29017#cve-2022-36067#vulnerability
Security Affairs·Nov 15, 2022 criticalExperts found critical RCE in Spotify’s Backstage#cve-2022-36067#vulnerability 2 min1
The Hacker News·Nov 15, 2022 criticalCritical RCE Flaw Reported in Spotify's Backstage Software Catalog and Developer Platform#cve-2022-36067#vulnerability 2 min1
Help Net Security·Oct 16, 2022 criticalWeek in review: 3FA, Fortinet firewalls under attack, and the riskiest connected devices#cve-2022-41033#cve-2022-40684#cve-2022-36067 in the wild 5 min1
The Hacker News·Oct 11, 2022 criticalResearchers Detail Critical RCE Flaw Reported in Popular vm2 JavaScript Sandbox#cve-2022-36067#vulnerability