Skip to content
OpenAdvisories

Package · npm

safer-eval

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2019-10760 Public exploit

    Sandbox Breakout / Arbitrary Code Execution in safer-eval

    safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.