patriksimek/vm2
View on GitHub ↗ ★ 4,114 JavaScript
Advanced vm/sandbox for Node.js
10 mentions on Hacker News by 10 people: 5 stories, 5 comments · first 2016-10-14 · latest 2026-06-11
20082026
-
…WASI feature of that specific runtime which is gated behind a build flag. ------ [Re: 3] https://github.com/patriksimek/vm2 > vm2 attempts to sandbox untrusted JavaScript code within the same Node.js process as your application. It does…
comment by dns_snek · 2026-06-11 · in The Road to the WASM Component Model 1.0 -
▲ 2
Vm2 discontinued due to unfixable security issuesstory by neapolisbeach · 2023-07-12 · 0 comments
-
▲ 1
VM2 (Puppeteer Dependency) Is Deprecated Due to Critical Security Issuesstory by mattgerstman · 2023-07-12 · 0 comments
-
▲ 2
NPM package vm2 is no longer securestory by h1fra · 2023-07-11 · 0 comments
-
This could be solved by having some kind of sandbox ( https://github.com/patriksimek/vm2 ), but I agree it complicates it. It would be cool if tsc had a flag —sandboxed or similar that does not allow any sideeffects (fs access, output,…
comment by mejutoco · 2021-11-17 · in The perfect configuration format? Try TypeScript -
…way a developer would have to opt in to granting permissions for a package to run executable code. https://github.com/patriksimek/vm2 https://medium.com/agoric/ses-securing-javascript-in-the-rea...
comment by dane-pgp · 2021-11-05 · in RFC: Make NPM install scripts opt-in -
▲ 2
Decentralized vulnerability disclosure does not workstory by cristianstaicu · 2021-10-02 · 1 comment
-
…NodeJS also includes a sandbox in its standard lib. And there are more advanced versions out there: https://github.com/patriksimek/vm2 Good luck and be careful ;)
comment by ArtWomb · 2018-08-09 · in Ask HN: Securely run code uploaded by users -
…Is the lack of maturity also the reason for not choosing something like vm2 for NodeJS https://github.com/patriksimek/vm2
comment by narsil · 2017-09-29 · in Cloudflare Workers: Run JavaScript Service Workers at the Edge -
▲ 2
Vm2: Advanced vm/sandbox for Node.jsstory by vmorgulis · 2016-10-14 · 0 comments