Skip to content
OpenAdvisories

Package · npm

localeval

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-mmqv-m45h-q2hp

    Sandbox Breakout / Arbitrary Code Execution in localeval

    All versions of `localeval` are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through `constructor.constructor`. This may allow attackers to execute arbitrary code in the system. Evalua…

    localeval npm