Topic
1 article
CyberSecureToday covers GHSA-qhwx-74w5-xhxq in a story published 2 Oct 2026.
The coverage includes 1 vulnerability advisory. 1 advisory is rated critical or high severity.
Stories on GHSA-qhwx-74w5-xhxq most often intersect with vm2, Node.js and Sandbox Escape, with Technology, Cloud & SaaS the most affected sector. The most recent story, “vm2 NodeVM Allowlist Bypass via node:test Runner execArgv Grants Arbitrary Host Process Execution (CVE-2026-92948)”, was published 2 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelA critical sandbox escape in vm2 allows sandboxed scripts in Node.js 24+ to reach the node:test runner and invoke run() with arbitrary execArgv CLI flags.