Skip to content
OpenAdvisories

Package · npm

notevil

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-7r5f-7qr4-pf6q

    Sandbox Breakout / Arbitrary Code Execution in notevil

    Versions of `notevil` prior to 1.3.2 are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to prevent access to the `Function` constructor by not checking the return values of function calls. This allows attackers to access the …

    notevil npm