The vm2 sandbox component of the open-source JavaScript runtime environment Node.js is vulnerable with certain settings.