CVE-2026-47208 - vm2: Sandbox Breakout Using Promise Species
CVE ID :CVE-2026-47208 Published : June 12, 2026, 3:16 p.m. | 1 hour, 51 minutes ago Description :vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape from the VM2 sandbox...