13 new critical holes in JavaScript sandbox allow execution of arbitrary code
In both cases, the highest-risk users are organizations that run untrusted JavaScript and assume vm2 is containing it. Those [application development] teams should patch immediately and add…