~ / search / GHSA-hcg3-56jf-x4vh

GHSA-hcg3-56jf-x4vh

safe-eval vulnerable to Prototype Pollution via the safeEval function

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-26121

Packages

EcosystemPackageAffectedFixed in
npm safe-eval <= 0.4.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its parameter content.

References

External links from the advisory. They lead to third-party sites.