Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Showing 2 most recent headlines Filtered view

The Hacker News 3 years, 3 months ago

Researchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox Library

The maintainers of the vm2 JavaScript sandbox module have shipped a patch to address a critical flaw that could be abused to break out of security boundaries and execute arbitrary shellcode

More from The Hacker News 8 Apr 2023, 5:04 p.m. Critical Vulnerability Flaw JavaScript Library Patch Remote Code Execution Research Sandbox South Korea

Bleeping Computer 3 years, 9 months ago

Critical VM2 flaw lets attackers run code outside the sandbox

Researchers are warning of a critical remote code execution flaw in 'vm2', a JavaScript sandbox library downloaded over 16 million times per month via the NPM package repository. [...]

More from Bleeping Computer 12 Oct 2022, 4:05 a.m. Flaw JavaScript Library Node.js Remote Code Execution Research Sandbox Warning

Latest cybersecurity reporting from selected sources.

Refine the feed

Volume over time

Fresh headlines available

Researchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox Library

Critical VM2 flaw lets attackers run code outside the sandbox