Description
In irisnet-crypto before 1.1.7 for IRISnet, the util/utils.js file allows code execution because of unsafe eval usage.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | irisnet-crypto | < 1.1.7 | 1.1.7 | GHSA-5fh8-x9xc-hxmc |
Critical · 9.8
CVE-2019-9115
EUVD-2022-2573GHSA-5fh8-x9xc-hxmc
irisnet-crypto RCE Vulnerability
Published Feb 25, 2019 · Updated Aug 4, 2024 · Assigned by mitre