CVE-2022-39266 Information

Description

isolated-vm is a library for nodejs which gives the user access to v8’s Isolate interface. In versions 4.3.6 and prior if the untrusted v8 cached data is passed to the API through CachedDataOptions attackers can bypass the sandbox and run arbitrary code in the nodejs process. As of time of publication there are no known fixed versions or workarounds.

Reference

https://github.com/laverdet/isolated-vm/security/advisories/GHSA-2jjq-x548-rhpv