Tag

node-vm

Safeguard articles tagged "node-vm" — guides, analysis, and best practices for software supply chain and application security.

1 article

DevSecOps

Node.js vm Module Security: Why It Is Not a Sandbox

The Node.js vm module runs code in a separate V8 context, but it is not a security sandbox. Here is why untrusted code can escape it and what to use instead.

Jul 22, 20256 min read