Skip to content
OpenAdvisories

Package · npm

safer-eval

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Critical —
    GHSA-876r-hj45-fw7g

    Sandbox Breakout / Arbitrary Code Execution in safer-eval

    All versions of `safer-eval` are vulnerable to Sandbox Escape leading to Remote Code Execution. It is possible to escape the sandbox by forcing exceptions recursively in the evaluated code. This may allow attacker to execute arbitrary code in the system. ## R…

    safer-eval npm
  • Critical 9.8
    CVE-2019-10769

    Sandbox Breakout / Arbitrary Code Execution in safer-eval

    safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError.

    safer-eval npm
  • Critical 9.9
    CVE-2019-10760 Public exploit

    Sandbox Breakout / Arbitrary Code Execution in safer-eval

    safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.

    snyk safer-eval safer-eval npm
  • Critical 9.9
    CVE-2019-10759

    Sandbox Breakout / Arbitrary Code Execution in safer-eval

    safer-eval before 1.3.4 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.

    snyk safer-eval safer-eval npm