We’ve written before, back in 2022, about a code execution hole in the widely-used JavaScript sandbox system . Now we’re writing to let you know about a similar-but-different hole in the same sandbox toolkit, and urging you to update if you use (or are reponsible for building) any products that depend on this package.

Read full article on Naked Security