Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...
The library is available in both the Arduino Library and PlatformIO Library registries. The library can also be cloned & included locally or included directly from GitHub (if your tooling supports it) ...