Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Showing 2 most recent headlines Filtered view

Bleeping Computer 3 years, 3 months ago

Exploit available for critical bug in VM2 JavaScript sandbox library

Proof-of-concept exploit code has been released for a recently disclosed critical vulnerability in the popular VM2 library, a JavaScript sandbox that is used by multiple software to run code securely in a virtualized environment. [...]

Bleeping Computer 8 Apr 2023, 5:41 a.m. Critical Vulnerability Disclosure Exploit JavaScript Library PoC Sandbox Vulnerability

Bleeping Computer 3 years, 9 months ago

Critical VM2 flaw lets attackers run code outside the sandbox

Researchers are warning of a critical remote code execution flaw in 'vm2', a JavaScript sandbox library downloaded over 16 million times per month via the NPM package repository. [...]

Bleeping Computer 12 Oct 2022, 4:05 a.m. Flaw JavaScript Library Node.js Remote Code Execution Research Sandbox Warning

Latest cybersecurity reporting from selected sources.

Refine the feed

Volume over time

Fresh headlines available

Exploit available for critical bug in VM2 JavaScript sandbox library

Critical VM2 flaw lets attackers run code outside the sandbox