Tag

vm2-cve

Safeguard articles tagged "vm2-cve" — guides, analysis, and best practices for software supply chain and application security.

1 article

Application Security

Security concerns of using the Node.js VM module as a sandbox

Node's vm module and vm2 were never a security boundary. Four critical CVEs and a 2023 deprecation prove why untrusted-code sandboxes need real isolation.

Apr 17, 20261 min read