Sandbox Breakout / Arbitrary Code Execution in safer-eval - safer-eval - GHSA-876r-hj45-fw7g
- Severity:
- High
Description
All versions of safer-eval are vulnerable to Sandbox Escape leading to Remote Code Execution. It is possible to escape the sandbox by forcing exceptions recursively in the evaluated code. This may allow attacker to execute arbitrary code in the system.
Recommendation
No fix is available yet. Followings are affected versions:
- >= 0.0.0
References
Related Issues
- Sandbox Breakout / Arbitrary Code Execution in safer-eval - safer-eval - GHSA-hgch-jjmr-gp7w - CVE-2019-10760
- Sandbox Breakout / Arbitrary Code Execution in safer-eval - safer-eval - GHSA-r3x4-wr4h-pw33 - CVE-2019-10759
- Sandbox Breakout / Arbitrary Code Execution in safer-eval - safer-eval - CVE-2019-10769
- Sandbox Breakout / Arbitrary Code Execution in localeval - Vulnerability
You might also like:
- Tags:
- npm
- safer-eval
Anything's wrong? Let us know Last updated on January 09, 2023