VM2 Node.js Library security advisory (AV26-432)

Serial number: AV26-432
Date: May 7, 2026

On May 4, 2026, Patrik Simek published security advisories to address critical vulnerabilities in the following product:

  • VM2 Node.js sandboxing library – versions prior to 3.11.2

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

Date modified: