{"uuid": "90c50d18-a728-446e-87cd-cee89f60819d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24120", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv36vr7rcq2y", "content": "CVE-2026-24120 - vm2\nAn outdated version of the vm2 sandbox for Node.js can be tricked into allowing malicious code to break free and run commands on the host computer. This is fixed in version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #GitHubActions #npm #CVE #infosec", "creation_timestamp": "2026-09-09T09:10:04.148468Z"}