All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation. Exploiting this vulnerability might result in remote code execution ("RCE"). **Vulnerable functions:** __defineGetter__, stack(), toLocaleString(), propertyIsEnumerable.call(), valueOf().
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSafe Eval Project Safe Eval
APPSafe-Eval Project≤ 0.4.1
Powiązane podatności
The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-san...
All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to ...
All versions of package safe-eval are vulnerable to Prototype Pollution which allows an attacker to add or mod...
This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on ...