A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.
The update smooths out mixed module workflows.
Forgot to unplug the iron this morning? The top smart plugs, outlets, and power strips we've tested let you control anything you can plug into the wall from your phone. I'm PCMag's managing editor for ...