Safer-eval Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Safer-eval Project records in CISA KEV

No Safer-eval Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2019-08025 CVE-2019-10760 · GHSA-hgch-jjmr-gp7w

MEDIUM 48

safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02876 Published 2019-10-15 Fixed in 1.3.2 CWE-94

TI-2019-08034 CVE-2019-10769 · GHSA-v63x-xc9j-hhvq

MEDIUM 47

safer-eval is a npm package to sandbox the he evaluation of code used within the eval function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02595 Published 2019-12-06 No fix listed CWE-94

TI-2019-08024 CVE-2019-10759 · GHSA-r3x4-wr4h-pw33

MEDIUM 46

safer-eval before 1.3.4 are vulnerable to Arbitrary Code Execution.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01787 Published 2019-10-15 Fixed in 1.3.4 CWE-94