⤷ Title: The Async Escape: Critical 9.8 Flaw in vm2 Turns JavaScript Sandboxes Into Open Gateways
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:46:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #async/await exploit #CVE_2026_22709 #JavaScript security #Node.js #npm security #Promise sanitization #RCE vulnerability #Sandbox Escape #Tech News #vm2
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:46:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #async/await exploit #CVE_2026_22709 #JavaScript security #Node.js #npm security #Promise sanitization #RCE vulnerability #Sandbox Escape #Tech News #vm2
Penetration Testing Tools
The Async Escape: Critical 9.8 Flaw in vm2 Turns JavaScript Sandboxes Into Open Gateways
A critical sandbox escape vulnerability has been unearthed within the vm2 library—a utility frequently employed as a JavaScript