Critical 9.8 CVSS flaws in vm2 affect 5.7M monthly users, allowing RCE via WASM and Promise bypasses. Upgrade to vm2 v3.11.0 immediately to secure your host.
WebAssembly
From Meta adopting the Steam Deck scheduler to the first Rust CVE, 2025 was the year Linux matured, clashed, and conquered. Read the full year-end wrap.
CVE-2024-34346 (CVSS 8.5) presents a significant risk as it allows for permission escalation through the mishandling of privileged files