Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...

CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

Node.js does not need more theatrical security output. It needs better developer workflow infrastructure. It needs tools that ...

GitHub has introduced a significant update to its CodeQL engine, enabling developers to define custom sanitizers and ...

Four npm packages linked to SAP's Cloud Application Programming Model were hijacked. The hackers added code that steals ...

Adobe patches a critical PDF flaw exploited for months, allowing attackers to bypass sandbox protections and deliver malware. Users urged to update now.

No 10 says the prime minister was not aware Lord Mandelson, the UK's former US ambassador, had failed the vetting process until earlier this week.

Four SAP NPM packages compromised in the Mini Shai-Hulud supply chain attack trigger a Bun runtime to install an information ...

May 7, 2026: We just added two new ASTDX codes to the list. Yes, they're for that version only. What are the new All Star Tower Defense codes? Developer Top Down Games has struck gold with their smash ...