Skip to content
OpenAdvisories
High · 7.5 CVE-2023-26121 EUVD-2023-1322GHSA-hcg3-56jf-x4vh

safe-eval vulnerable to Prototype Pollution via the safeEval function

Published Apr 11, 2023 · Updated Feb 10, 2025 · Assigned by snyk

Description

All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its parameter content.

Affected products

VendorProductAffectedFixed
— safe-eval — —

Affected packages

EcosystemPackageAffectedFixedRecord
npm safe-eval <= 0.4.2 — GHSA-hcg3-56jf-x4vh

References