A critical vulnerability, CVE-2023-32314, exists in the vm2 sandbox, which is commonly used in Node.js applications to run untrusted code in a secure environment.
vm2
The vm2 sandbox is a popular tool in the Node.js ecosystem that allows developers to safely run untrusted code by utilizing whitelisted Node'
A recently discovered security vulnerability, identified as CVE-2023-29199, has been found in the source code transformer of vm2 library for versions up to 3.9.
vm2 is a popular sandbox for running untrusted JavaScript code with whitelisted Node.js built-in modules. It comes with many useful features and checks to