Yes. More than a few times. It however is not really designed to operate as a secure sandbox environment.

https://nvd.nist.gov/vuln/detail/CVE-2025-68668

https://nvd.nist.gov/vuln/detail/CVE-2025-51464

https://nvd.nist.gov/vuln/detail/CVE-2026-25905