Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2021/05/06 4:11 p.m.78 views

Withdrawn: Arbitrary Code Execution in static-eval

All versions of package static-eval are vulnerable to Arbitrary Code Execution using FunctionExpressions and TemplateLiterals. PoC: var evaluate = require'static-eval'; var parse = require'esprima'.parse; var src="function x return...

5AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder