The Hacker News·Jan 29, 2026 criticalCritical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution#cve-2026-22709#cve-2022-36067#cve-2023-29017 2 min1
The Hacker News·Apr 20, 2023 criticalCritical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution#cve-2023-29199#cve-2023-30547#cve-2023-290172