CVE-2022-39266
1 advisory.
npm/isolated-vm CVE-2022-39266: critical 9.6, EPSS 1.30%
isolated-vm has vulnerable CachedDataOptions in API
Action: Upgrade isolated-vm to 4.3.7 or later.
npm i isolated-vm@4.3.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.7 | - |
Fixed versions
| 4.3.7 |
Sources
- osv: GHSA-2jjq-x548-rhpv
- https://github.com/laverdet/isolated-vm/security/advisories/GHSA-2jjq-x548-rhpv
- https://nvd.nist.gov/vuln/detail/CVE-2022-39266
- https://github.com/laverdet/isolated-vm/issues/379
- https://github.com/laverdet/isolated-vm/commit/218e87a6d4e8cb818bea76d1ab30cd0be51920e8
- https://github.com/laverdet/isolated-vm
- https://github.com/laverdet/isolated-vm/commits/v4.3.7
CVE-2022-39266 · published · modified · JSON