A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.

Elizabeth Guevara is a personal finance reporter who explains the world of business and economics and how it impacts your finances. She joined Investopedia in 2024. Investopedia / Photo Composite by ...

Student-loan borrowers have had a tumultuous few years, and that’s likely to continue in 2026. Repayment plans for all borrowers and borrowing limits for some programs are set to change next year.