Skip to content
OpenAdvisories
Critical · 9.8 CVE-2019-10769 EUVD-2019-0802GHSA-v63x-xc9j-hhvq

Sandbox Breakout / Arbitrary Code Execution in safer-eval

Published Dec 6, 2019 · Updated Aug 4, 2024 · Assigned by snyk

Description

safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError.

Affected products

VendorProductAffectedFixed
— safer-eval All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm safer-eval <= 1.3.6 — GHSA-v63x-xc9j-hhvq

References