arbitrary code execution

May 7, 2026

vm2 Node.js Sandbox Escape Enables Code Execution

Critical vm2 Node.js library vulnerabilities allow full sandbox escape and arbitrary code execution. See how attackers exploit it and how to protect your app.