CVE-2021-21413
1 advisory.
npm/isolated-vm CVE-2021-21413: high 8, EPSS 0.72%
Misuse of `Reference` and other transferable APIs may lead to access to nodejs isolate
Action: Upgrade isolated-vm to 4.0.0 or later.
npm i isolated-vm@4.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0 | - |
Fixed versions
| 4.0.0 |
Sources
- osv: GHSA-mmhj-4w6j-76h7
- https://github.com/laverdet/isolated-vm/security/advisories/GHSA-mmhj-4w6j-76h7
- https://nvd.nist.gov/vuln/detail/CVE-2021-21413
- https://github.com/laverdet/isolated-vm/commit/2646e6c1558bac66285daeab54c7d490ed332b15
- https://github.com/laverdet/isolated-vm/commit/27151bfecc260e96714443613880e3b2e6596704
- https://github.com/laverdet/isolated-vm/blob/main/CHANGELOG.md#v400
CVE-2021-21413 · published · modified · JSON