A critical security flaw has been discovered in the vm2 library, a popular sandboxing solution used in Node.js applications. The vulnerability allows attackers to escape the sandbox environment and execute arbitrary code on the host system, defeating vm2’s core security purpose. The issue affects applications that rely on vm2 to safely run untrusted JavaScript. This…