GHSA-hcg3-56jf-x4vh

ghsaUSosv

safe-eval vulnerable to Prototype Pollution via the safeEval function

view advisory published 2023-04-11Licence: CC-BY-4.0

All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its parameter content.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-26121US	critical10.0	1.11% (66th)	—	2023-04-11
All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its parameter content.

references

External citations — patches, advisories, analysis.

https://gist.github.com/seongil-wi/9d9fc0cc5b7b130419cd45827e59c4f9WEB
https://github.com/hacksparrow/safe-evalPACKAGE
https://github.com/hacksparrow/safe-eval/issues/28WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-26121ADVISORY
https://security.snyk.io/vuln/SNYK-JS-SAFEEVAL-3373062WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan