Eval Injection

Overview Affected versions of this package are vulnerable to Eval Injection via the processEmbeddedExpressions process. An attacker can execute arbitrary operating-system commands by sending specially crafted HTTP request data containing embedded expressions that are recursively evaluated...

io.karatelabs:karate-gatling (>=2.0.3, <=2.0.10), io.karatelabs:karate-image (2.0.10) +1 more potentially affected by unknown CVE via io.karatelabs:karate-core (>=2.0.3, <=2.0.10)

io.karatelabs:karate-core MAVEN version =2.0.3, =2.0.3, =2.0.3, =2.0.10 Source cves: unknown CVE Source advisory: SNYK:JAVA-IOKARATELABS-17732778...

com.intuit.karate:karate-gatling (1.3.1), com.intuit.karate:karate-junit4 (1.3.1) +4 more potentially affected by CVE-2023-1370 via com.intuit.karate:karate-core (1.3.1)

com.intuit.karate:karate-core MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.intuit.karate:karate-core and may be impacted: - com.intuit.karate:karate-gatling 1.3.1 - com.intuit.karate:karate-junit4 1.3.1 -...