Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

A critical security flaw has been found in isolated-vm, a popular open-source sandbox. This vulnerability could allow attackers to escape the sandboxed environment, potentially leading to remote code execution. The flaw affects all versions of the library up to and including 7.0.0. The vulnerability has been assigned a GitHub security advisory identifier, but not a CVE identifier yet. Isolated-vm is a widely-used sandbox with significant community support, having over 2,900 stars and 190 forks on GitHub.