Withdrawn: Arbitrary Code Execution in static-eval

All versions of package static-eval are vulnerable to Arbitrary Code Execution using FunctionExpressions and TemplateLiterals. PoC: var evaluate = require'static-eval'; var parse = require'esprima'.parse; var src="function x return...

PT-2021-3173

Name of the Vulnerable Software and Affected Versions static-eval versions prior to a fixed version Description The issue is related to incorrect code generation management in the FunctionExpressions and TemplateLiterals functions of the static-eval package. This can allow a remote attacker to...