JavaScript Sandbox vm2: Critical Vulnerability Allows Escape

The JavaScript sandbox vm2 for Node.js was actually discontinued. Now an update closes a critical security vulnerability.
The Hacker News

Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution

A critical vm2 Node.js vulnerability (CVE-2026-22709, CVSS 9.8) allows sandbox escape via Promise handler bypass.

Critical sandbox escape flaw found in popular vm2 NodeJS library

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.
InfoQ

Google Releases Gemma 3 270M Variant Optimized for Function Calling on Mobile and Edge Devices

FunctionGemma is a new, lightweight version of the Gemma 3 270M model, fine-tuned to translate natural language into ...
InfoWorld

jQuery 4.0.0 JavaScript library features trusted types

The first major update in nearly 10 years, jQuery 4.0.0 follows a long development cycle and several pre-releases.
Hosted on MSN

SSA commissioner says Trump is 'keeping his promise on Social Security,' but experts question the claims. Here's what beneficiaries need to know

Is the federal government still capable of safeguarding the Social Security system millions of Americans depend on, or is the program being stretched thin by political promises and behind-the-scenes ...
Adirondack Daily Enterprise

Zohran Mamdani promises to govern ‘expansively and audaciously’ in inaugural speech as NYC mayor

NEW YORK — Zohran Mamdani became mayor of New York City on Thursday, taking over one of the most unrelenting jobs in American politics with a promise to transform government on behalf of the city’s ...