Schools and universities across the country are recovering from an outage tied to a cyberattack that knocked down Canvas.

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...