The vulnerability of the createFunction() function in the executorUtils.ts file of the SandboxJS library allows a malicious actor to execute arbitrary code.

The vulnerability of the createFunction function in the executorUtils.ts file of the SandboxJS library is related to improper code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Arbitrary Code Injection

Overview @nyariv/sandboxjs is a Javascript sandboxing library. Affected versions of this package are vulnerable to Arbitrary Code Injection via createFunction in executorUtils.ts. An attacker can escape the sandbox and execute arbitrary code in the host environment by leveraging access to interna...