Arbitrary Code Execution
isolated-vm is vulnerable to arbitrary code execution. The vulnerability exists through the ability to instantiate NativeModule from the RAII wrapper, allowing the file upload API to create objects that could run native code...