Arguments for Gregor Townsend remaining as Scotland head coach are growing increasingly small after familiar failings lead to defeat in rainy Rome, writes Tom English.
The JavaScript sandbox vm2 for Node.js was actually discontinued. Now an update closes a critical security vulnerability.
A critical vm2 Node.js vulnerability (CVE-2026-22709, CVSS 9.8) allows sandbox escape via Promise handler bypass.