A critical vm2 Node.js vulnerability (CVE-2026-22709, CVSS 9.8) allows sandbox escape via Promise handler bypass.
Browsers make it easy to save payment info, but that convenience opens the door to malware, breaches, and data theft. We tell you what to do instead.