Skip to content
OpenAdvisories

Vendor

laverdet

2 known vulnerabilities.

Products

isolated-vm 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2021-21413 Public exploit

    Misuse of `Reference` and other transferable APIs may lead to access to nodejs isolate

    isolated-vm is a library for nodejs which gives you access to v8's Isolate interface. Versions of isolated-vm before v4.0.0 have API pitfalls which may make it easy for implementers to expose supposed secure isolates to the permissions of the main nodejs isol…

    laverdet isolated-vm isolated-vm npm