A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.

Sandbox escape vulnerability in vm2, used by nearly 900 NPM packages, allows attackers to bypass security protections and ...

From fine-tuning open source models to building agentic frameworks on top of them, the open source world is ripe with ...

A critical vm2 Node.js vulnerability (CVE-2026-22709, CVSS 9.8) allows sandbox escape via Promise handler bypass.

Memory-safety exploits account for 70 percent of vulnerabilities ...

Enterprises need to practice governance of open-source software to regain control of their software supply chains.

The board declared the books sexually explicit after a report by chair John Wahl.

Keith: John, tell us a little bit about Chainguard and what you’re going to be showing us on DEMO today. John: Definitely.

Researchers argue AI coding tools disrupt community and hinder returns to maintainers Tailwind Labs CEO Adam Wathan recently ...

The issues were uncovered by AISLE and disclosed through a coordinated process with the OpenSSL project. OpenSSL is one of ...