Skip to content
OpenAdvisories

Package · npm

isolated-vm

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.7
    CVE-2022-39266

    isolated-vm has vulnerable CachedDataOptions in API

    isolated-vm is a library for nodejs which gives the user access to v8's Isolate interface. In versions 4.3.6 and prior, if the untrusted v8 cached data is passed to the API through CachedDataOptions, attackers can bypass the sandbox and run arbitrary code in …

    laverdet isolated-vm isolated-vm npm
  • High 8.0
    CVE-2021-21413 Public exploit

    Misuse of `Reference` and other transferable APIs may lead to access to nodejs isolate

    isolated-vm is a library for nodejs which gives you access to v8's Isolate interface. Versions of isolated-vm before v4.0.0 have API pitfalls which may make it easy for implementers to expose supposed secure isolates to the permissions of the main nodejs isol…

    laverdet isolated-vm isolated-vm npm