Sandbox Breakout / Arbitrary Code Execution in localeval

All versions of localeval are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through constructor.constructor. This may allow attackers to execute arbitrary code in the system. Evaluating the payload...

camp (=15.2.23), directdetect (>=1.0.0 <=1.2.0) +3 more potentially affected by unknown CVE via localeval (>=13.12.11 <=15.2.3)

localeval NPM version =13.12.11, =1.0.0, =1.0.0, =1.0.1 - mocha-test-runner =0.4.3 Source cves: unknown CVE Source advisory: OSV:GHSA-MMQV-M45H-Q2HP...

GHSA-MMQV-M45H-Q2HP Sandbox Breakout / Arbitrary Code Execution in localeval

All versions of localeval are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through constructor.constructor. This may allow attackers to execute arbitrary code in the system. Evaluating the payload...