Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Safer-eval Project Clear all filters
TI-2019-08034 CVE-2019-10769 · GHSA-v63x-xc9j-hhvq

Code injection in safer-eval

Priority MEDIUM 47

safer-eval is a npm package to sandbox the he evaluation of code used within the eval function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02595 Published 2019-12-06 No fix listed CWE-94
TI-2019-08025 CVE-2019-10760 · GHSA-hgch-jjmr-gp7w

Code injection in Snyk safer-eval

Priority MEDIUM 48

safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02876 Published 2019-10-15 Fixed in 1.3.2 CWE-94
TI-2019-08024 CVE-2019-10759 · GHSA-r3x4-wr4h-pw33

Code injection in Snyk safer-eval

Priority MEDIUM 46

safer-eval before 1.3.4 are vulnerable to Arbitrary Code Execution.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01787 Published 2019-10-15 Fixed in 1.3.4 CWE-94