The JavaScript sandbox vm2 for Node.js was actually discontinued. Now an update closes a critical security vulnerability.
Paul Scholes suspects Arsenal have lost their momentum in the Premier League title race and expects the leaders to drop more points against Leeds United this weekend.
A critical vm2 Node.js vulnerability (CVE-2026-22709, CVSS 9.8) allows sandbox escape via Promise handler bypass.
While things might be feeling nervy around Coventry City this week, their blip might have come at a perfect time, says EFL ...