Skip to content
OpenAdvisories

Archive

30 March 2021

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.0
    CVE-2021-21413 Public exploit

    Misuse of `Reference` and other transferable APIs may lead to access to nodejs isolate

    isolated-vm is a library for nodejs which gives you access to v8's Isolate interface. Versions of isolated-vm before v4.0.0 have API pitfalls which may make it easy for implementers to expose supposed secure isolates to the permissions of the main nodejs isol…