A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.
Trump did not provide a reason for the decision, which comes after Canada's PM Mark Carney warned of a "rupture" in the ...