7.5
Élevée
CVE-2022-25904 All versions of package safe-eval are vulnerable to Prototype Pollution which allows an attacker to add or modify…
Description
All versions of package safe-eval are vulnerable to Prototype Pollution which allows an attacker to add or modify properties of the Object.prototype.Consolidate when using the function safeEval. This is because the function uses vm variable, leading an attacker to modify properties of the Object.prototype.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| safe-eval | Versions non publiées |
Autres CVE de safe-eval
Les 4 CVE de safe-eval →
CVE-2023-26122
All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization
8.8
Élevée
CVE-2023-26121
All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper…
7.5
Élevée
CVE-2020-7710
This affects all versions of package safe-eval
8.1
Élevée