04_nodeblog (1.0.0), 10tcl (>=0.0.1, <=0.0.10) +3893 more potentially affected by unknown CVE via constantinople (>=1.0.2, <=3.0.2)

constantinople NPM version =1.0.2, =0.0.1, =1.0.1, =0.1.1, =0.0.1, =0.0.7, =1.0.23, =1.0.0, =1.0.0, =1.1.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2019-0217...

04_nodeblog (1.0.0), 10tcl (>=0.0.1, <=0.0.10) +3893 more potentially affected by unknown CVE via constantinople (>=1.0.2, <=3.0.2)

constantinople NPM version =1.0.2, =0.0.1, =1.0.1, =0.1.1, =0.0.1, =0.0.7, =1.0.23, =1.0.0, =1.0.0, =1.1.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2018-0068...

WS-2018-0068

Versions of constantinople prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution...

Constantinople Application Software Code Execution

The vulnerability of the constantinople application software of Avrora Center is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

PT-2021-3183

Name of the Vulnerable Software and Affected Versions Аврора Центр affected versions not specified Description The issue is related to insufficient input validation in the constantinople library of the Аврора Центр application. This could allow a remote attacker to execute arbitrary code...

Sandbox bypass in constantinople

constantinople before 3.1.1 affected by a sandbox bypass...

GHSA-HG7C-66FF-9Q8G Sandbox bypass in constantinople

constantinople before 3.1.1 affected by a sandbox bypass...

PT-2020-21339

Name of the Vulnerable Software and Affected Versions constantinople versions prior to 3.1.1 Description The issue is related to a sandbox bypass. Recommendations For versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue...

Arbitrary Code Execution

constantinople is vulnerable to Arbitrary Code Execution. The library uses Function to evaluate the code expression, allowing an attacker to attempt a sandbox bypass which can lead to arbitrary code execution...

Sandbox Bypass Leading to Arbitrary Code Execution in constantinople

Versions of constantinople prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution. Recommendation Update to version 3.1.1 or later...

04_nodeblog (1.0.0), 10tcl (>=0.0.1, <=0.0.10) +3254 more potentially affected by unknown CVE via constantinople (3.0.2)

constantinople NPM version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on constantinople and may be impacted: - 04nodeblog 1.0.0 - 10tcl =0.0.1, =1.0.1, =0.1.1, =0.0.7, =1.0.23, =1.0.0, =1.0.0, =0.0.0, =1.0.0, =0.0.1-alpha-1.3, =0.1.30 and more...

GHSA-4VMM-MHCQ-4X9J Sandbox Bypass Leading to Arbitrary Code Execution in constantinople

Versions of constantinople prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution. Recommendation Update to version 3.1.1 or later...

04_nodeblog (1.0.0), 10tcl (>=0.0.1, <=0.0.10) +3254 more potentially affected by unknown CVE via constantinople (3.0.2)

constantinople NPM version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on constantinople and may be impacted: - 04nodeblog 1.0.0 - 10tcl =0.0.1, =1.0.1, =0.1.1, =0.0.7, =1.0.23, =1.0.0, =1.0.0, =0.0.0, =1.0.0, =0.0.1-alpha-1.3, =0.1.30 and more...

PT-2019-20002

Name of the Vulnerable Software and Affected Versions constantinople versions prior to 3.1.1 Description The issue concerns a sandbox bypass that can lead to arbitrary code execution. Recommendations Update to version 3.1.1 or later...

Sandbox Bypass Leading to Arbitrary Code Execution

Overview Versions of constantinople prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution. Recommendation Update to version 3.1.1 or later. References GitHub Advisory...

CPP-Ethereum libevm create2 Information Leak Vulnerability(CVE-2017-14457)

Summary An exploitable information leak / denial of service vulnerability exists in the libevm Ethereum Virtual Machine create2 opcode handler of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read leading to memory disclosure or denial of service. An attacker ca...