CPE
The vm2 sandbox library is affected by multiple critical vulnerabilities, including remote code execution via sandbox escape, which allow attackers to manipulate data, disclose information, or execute arbitrary code.