7.5
High
CVE-2022-25904 All versions of package safe-eval are vulnerable to Prototype Pollution which allows an attacker to add or modify…
Description
All versions of package safe-eval are vulnerable to Prototype Pollution which allows an attacker to add or modify properties of the Object.prototype.Consolidate when using the function safeEval. This is because the function uses vm variable, leading an attacker to modify properties of the Object.prototype.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| safe-eval | Versions not published |
Other CVEs of safe-eval
The 4 CVEs of safe-eval →
CVE-2023-26122
All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization
8.8
High
CVE-2023-26121
All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper…
7.5
High
CVE-2020-7710
This affects all versions of package safe-eval
8.1
High