Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
The Hacker News August 20, 2026

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are in 6.2.0 and 7.0.1.

Advertisement

Advertisement

More like this