The vm2 sandbox component of the open-source JavaScript runtime environment Node.js is vulnerable with certain settings.

CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

Earn these JavaScript certs to demonstrate mastery of the most in-demand skills for the world’s most-used programming ...

Node.js does not need more theatrical security output. It needs better developer workflow infrastructure. It needs tools that ...

Intercept.js is a pure JavaScript, YARA-compatible detection engine that combines byte-level pattern matching with runtime context inside sandboxed JavaScript environments (browsers, serverless ...

The goal of this project is to create an online STL file that users can upload a 3D Model (STL format binary or ascii) to get stats of their 3D Models. An example would be the volume of the model or ...