All versions of the package... CVE-2023-26122

- AV AC AU C I A
发布: 2023-04-11
修订: 2025-02-07

All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation. Exploiting this vulnerability might result in remote code execution ("RCE"). **Vulnerable functions:** __defineGetter__, stack(), toLocaleString(), propertyIsEnumerable.call(), valueOf().

0%
暂无可用Exp或PoC
当前有1条受影响产品信息