Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

Learn how a single JavaScript Date() timezone mistake silently corrupts web apps and how to fix timestamp bugs in JS, Python, ...

CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

Weekly cybersecurity recap covering zero-days, malware, phishing, supply chain attacks, cloud threats, AI security risks, and ...

An introduction to the Chakra JavaScript engine and how it can be used within a Windows 10 app to execute JavaScript. Initially, the concept of executing JavaScript within a Universal Windows Platform ...

The vm2 sandbox component of the open-source JavaScript runtime environment Node.js is vulnerable with certain settings.