JavaScript Sandbox vm2: Critical Vulnerability Allows Escape

The JavaScript sandbox vm2 for Node.js was actually discontinued. Now an update closes a critical security vulnerability.
CSO Online

Critical bug in popular vm2 Node.js sandboxing library puts projects at risk

Sandbox escape vulnerability in vm2, used by nearly 900 NPM packages, allows attackers to bypass security protections and ...
MIT Technology Review

Rules fail at the prompt, succeed at the boundary

Put rules at the capability boundary: Use policy engines, identity systems, and tool permissions to determine what the agent ...

Critical sandbox escape flaw found in popular vm2 NodeJS library

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.

Adebayo’s 26 points and 15 rebounds lead Heat to dominant 147-116 win over Jazz

Bam Adebayo scored 26 points and grabbed 15 rebounds, leading the Miami Heat to a 147-116 win over the Utah Jazz.

Brunson scores 31 points to lift the Knicks over Embiid and the 76ers, 112-109

Jalen Brunson scored 31 points, OG Anunoby added 23 and the New York Knicks followed their most lopsided win in franchise history with a 112-109 victory over the Philadelphia 76ers on Saturday.