CVE-2026-32304 — Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to 3.0.14, the create_function(args, code) function passes both parameters directly to the Function — CVE Database · The Intelligence Room