The Hacker News·Jan 29, 2026 criticalCritical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution#cve-2026-22709#cve-2022-36067#cve-2023-29017 2 min1
The Hacker News·Apr 20, 2023 criticalCritical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution#cve-2023-29199#cve-2023-30547#cve-2023-290172
Security Affairs·Apr 9, 2023 criticalResearchers disclose sandbox escape bug in vm2 sandbox library#cve-2023-29017#cve-2022-36067#exploit1
The Hacker News·Apr 8, 2023 criticalResearchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox Library#cve-2023-29017#cve-2022-36067#vulnerability