Security News Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE TheHackerNews Daniel Bender 20 Aug 2026 Share Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are in 6.2.0 and 7.0.1.
