Skip to content
OpenAdvisories

Package · npm

safe-eval

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2023-26122

    safe-eval vulnerable to Sandbox Bypass due to improper input sanitization

    All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation. Exploiting this vulnerability might result in remote code execution ("RCE"). **Vulne…

    safe-eval npm
  • High 7.5
    CVE-2023-26121

    safe-eval vulnerable to Prototype Pollution via the safeEval function

    All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its parameter content.

    safe-eval npm
  • High 7.5
    CVE-2022-25904

    Prototype Pollution

    All versions of package safe-eval are vulnerable to Prototype Pollution which allows an attacker to add or modify properties of the Object.prototype.Consolidate when using the function safeEval. This is because the function uses vm variable, leading an attack…

    safe-eval npm
  • High —
    GHSA-9pcf-h8q9-63f6

    Sandbox Breakout / Arbitrary Code Execution in safe-eval

    All versions of `safe-eval` are vulnerable to Sandbox Escape leading to Remote Code Execution. A payload chaining a function's callee and caller constructors can escape the sandbox and execute arbitrary code. For example, the payload ``` ((() => { const targe…

    safe-eval npm
  • High 8.1
    CVE-2020-7710

    Sandbox Escape

    This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine.

    safe-eval npm