Skip to content
OpenAdvisories

Package · npm

isolated-vm

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.7
    CVE-2022-39266

    isolated-vm has vulnerable CachedDataOptions in API

    isolated-vm is a library for nodejs which gives the user access to v8's Isolate interface. In versions 4.3.6 and prior, if the untrusted v8 cached data is passed to the API through CachedDataOptions, attackers can bypass the sandbox and run arbitrary code in …

    laverdet isolated-vm isolated-vm npm