Multiple critical sandbox-escape vulnerabilities have been disclosed in vm2, one of the most widely used Node.js sandboxing libraries, allowing attackers to escape the isolated execution environment and run arbitrary commands directly on the host system. Eleven advisories were published by maintainer patriksimek within days, covering affected versions up to 3.11.1, with patches available in vm2 […]
The post Critical vm2 Vulnerabilities Enable Arbitrary Code Execution Attacks appeared first on Cyber Security News.