CVE-2023-26122
All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation.Exploiting this vulnerability might result in remote code execution ("RCE").Vulnerable functions:defineGetter, stack(), toLocaleString(), propertyIsEnumerable.call(), valueOf().
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- report github.com
- report github.com
- report github.com
- report github.com
- report github.com
- web gist.github.com
- web security.snyk.io