Sandbox Breakout / Arbitrary Code Execution in safer-eval - safer-eval - GHSA-876r-hj45-fw7g - Vulnerability

Description

All versions of safer-eval are vulnerable to Sandbox Escape leading to Remote Code Execution. It is possible to escape the sandbox by forcing exceptions recursively in the evaluated code. This may allow attacker to execute arbitrary code in the system.

Recommendation

No fix is available yet. Followings are affected versions:

>= 0.0.0

References

GHSA-876r-hj45-fw7g
www.npmjs.com

Could your website be exposed too?

SmartScanner can check your website for Sandbox Breakout / Arbitrary Code Execution in safer-eval - safer-eval - GHSA-876r-hj45-fw7g and gives you actionable findings to investigate.

Start a free scan