Isolated-vm Project

Isolated-vm

2 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2022-39266

  • EPSS 0.26%
  • Veröffentlicht 29.09.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:17:54

isolated-vm is a library for nodejs which gives the user access to v8's Isolate interface. In versions 4.3.6 and prior, if the untrusted v8 cached data is passed to the API through CachedDataOptions, attackers can bypass the sandbox and run arbitrary...

9.6

CVE-2021-21413

  • EPSS 0.14%
  • Veröffentlicht 30.03.2021 23:15:14
  • Zuletzt bearbeitet 21.11.2024 05:48:18

isolated-vm is a library for nodejs which gives you access to v8's Isolate interface. Versions of isolated-vm before v4.0.0 have API pitfalls which may make it easy for implementers to expose supposed secure isolates to the permissions of the main no...