CVE-2021-21413

CVE-2021-21413 describes a critical vulnerability in isolated-vm versions prior to v4.0.0, a Node.js library for V8 isolates, where API pitfalls allow attackers to bypass isolation and access the main Node.js isolate's permissions. This vulnerability, rated 9.6 CRITICAL, allows for arbitrary code execution by leveraging exposed Reference instances to gain access to the Node.js context's Function object or NativeModule objects, potentially loading and running native code. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting it is not currently a widespread threat.