Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...
Bun creator Jarred Sumner has posted a Zig-to-Rust porting guide, igniting speculation that the project may migrate away from ...
Malicious code inserted into four SAP-related npm packages exposed developer workstations and automated build systems to credential theft, marking a sharp escalation in attacks against open-source ...
CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...
A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...
Weekly cybersecurity recap covering zero-days, malware, phishing, supply chain attacks, cloud threats, AI security risks, and ...
An introduction to the Chakra JavaScript engine and how it can be used within a Windows 10 app to execute JavaScript. Initially, the concept of executing JavaScript within a Universal Windows Platform ...
The vm2 sandbox component of the open-source JavaScript runtime environment Node.js is vulnerable with certain settings.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results