SECURITYBLEEPING COMPUTER
Critical vm2 sandbox bug lets attackers execute code on hosts
A critical vulnerability in vm2 allows attackers to escape the sandbox and execute arbitrary code on host systems. This bug affects the popular Node.js sandboxing library. The vulnerability can be used to compromise host systems.
Mentioned