Blog

// blog_posts

Personal blog — security research, engineering, and thoughts.

Mar 12, 2021
The Insecure Node.js vm Module
Why the Node.js vm module is not a security boundary and how attackers escape it.
Read more →
nodejssandbox-escapevm