JavaScript Sandbox vm2: Critical Vulnerability Allows Escape

The JavaScript sandbox vm2 for Node.js was actually discontinued. Now an update closes a critical security vulnerability.
CSO Online

Critical bug in popular vm2 Node.js sandboxing library puts projects at risk

Sandbox escape vulnerability in vm2, used by nearly 900 NPM packages, allows attackers to bypass security protections and ...
MIT Technology Review

Rules fail at the prompt, succeed at the boundary

Put rules at the capability boundary: Use policy engines, identity systems, and tool permissions to determine what the agent ...

Critical sandbox escape flaw found in popular vm2 NodeJS library

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.
InfoQ

Google Releases Gemma 3 270M Variant Optimized for Function Calling on Mobile and Edge Devices

FunctionGemma is a new, lightweight version of the Gemma 3 270M model, fine-tuned to translate natural language into ...

Heat beat short-handed Suns 111-102 in short turnaround behind Adebayo’s 22 points

Bam Adebayo scored 22 points, Jaime Jaquez Jr. added 20 and the Miami Heat beat the short-handed Phoenix Suns 111-102.

Luka Doncic beats the Mavericks again as Lakers rally in 4th for 116-110 victory

Luka Doncic had 33 points and 11 assists, and the Lakers erased a 15-point deficit in the final seven minutes of a 116-110 ...