CRITICAL10.0

GHSA-hcg3-56jf-x4vh

safe-eval vulnerable to Prototype Pollution via the safeEval function

Details

All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its parameter content.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/safe-eval

Introduced in: 0

No fixed version published yet for safe-eval (npm). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-26121[ADVISORY]
https://github.com/hacksparrow/safe-eval/issues/28[WEB]
https://gist.github.com/seongil-wi/9d9fc0cc5b7b130419cd45827e59c4f9[WEB]
https://github.com/hacksparrow/safe-eval[PACKAGE]
https://security.snyk.io/vuln/SNYK-JS-SAFEEVAL-3373062[WEB]