CVE-2023-26122
All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype...
Original description
The description as published by the source.
All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation.Exploiting this vulnerability might result in remote code execution ("RCE").Vulnerable functions:defineGetter, stack(), toLocaleString(), propertyIsEnumerable.call(), valueOf().
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- report github.com
- report github.com
- report github.com
- report github.com
- report github.com
- web gist.github.com
- web security.snyk.io