Eval Injection

Overview Affected versions of this package are vulnerable to Eval Injection via the converttovalue function. An unauthenticated attacker can execute arbitrary code by sending specially crafted JSON-RPC requests containing malicious parameter text, which is evaluated through eval when processed as...