Lucene search
+L

1 matches found

OSV
OSV
added 2019/12/11 2:01 a.m.33 views

GHSA-V63X-XC9J-HHVQ Sandbox Breakout / Arbitrary Code Execution in safer-eval

All versions of safer-eval are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context and is not suited to process arbitrary user input. This may allow attackers to execute arbitrary code in the system. Recommendation The package is...

9.8CVSS7.6AI score0.02595EPSS
SaveExploits1References5
Rows per page
Query Builder