Tag

nodejs-sandbox

Safeguard articles tagged "nodejs-sandbox" — guides, analysis, and best practices for software supply chain and application security.

1 article

AppSec

What Is vm2? The Node.js Sandbox and Its Security History

vm2 was the most popular way to run untrusted JavaScript inside Node.js — until a string of sandbox-escape CVEs and its 2023 deprecation showed why sandboxing a dynamic language is so hard to get right.

Apr 14, 20256 min read