The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. A critical-severity type ...

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...

The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution ...

A critical isolated-vm flaw lets untrusted JavaScript escape the V8 sandbox and potentially hijack the host process.

Node has traditionally been focused on Google's V8 JavaScript engine, but adding ChakraCore support will allow developers to target more platforms Microsoft on Tuesday submitted a pull request to Node ...

The latest Node release includes require() support for ES modules, improved WebSocket communications, and an update to Google's V8 JavaScript engine 2.4. Node.js 22 ...

For the third time in recent months, Google has found itself scrambling to fix a potentially serious zero-day flaw in the Chrome browser’s V8 JavaScript engine. Addressed on Monday as part of an ...

Google has released emergency security patches to address CVE-2025-10585, a high-severity zero-day bug in the V8 JavaScript engine of Chrome that has been actively exploited, the sixth Chrome zero-day ...