Critical vm2 sandbox bug lets attackers execute code on hosts
…However, WebAssembly exception handling can intercept JavaScript errors at a lower level inside Google’s V8 engine, bypassing vm2’s JavaScript-based security defenses. By triggering a specially crafted TypeError using Symbol…
