vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution
A dozen critical vulnerabilities were disclosed in the vm2 Node.js sandbox library, each allowing sandbox escape and arbitrary code execution on the host system. The flaws were reported by researchers including "XmiliaH" (five CVEs), "c0rydoras" (two), and...