{"api_version":"v1","generated_at":"2026-10-09T08:25:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-laverdet-isolated-vm-66572414fc3f","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/isolated-vm","name":"isolated-vm","next_cursor":null,"observations":[{"affected":"<= 4.3.6","affected_versions_present":true,"cve_id":"CVE-2022-39266","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-39266","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-23T16:53:54.194Z","patch_url":"","primary_source":"","published":"2022-09-29T18:10:08.000Z"},{"affected":"< 4.0.0","affected_versions_present":true,"cve_id":"CVE-2021-21413","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-21413","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T18:09:16.102Z","patch_url":"https://github.com/laverdet/isolated-vm/commit/2646e6c1558bac66285daeab54c7d490ed332b15","primary_source":"","published":"2021-03-30T22:25:14.000Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"laverdet"}}