camp (15.2.23), fleau (15.2.18) potentially affected by unknown CVE via localeval (15.2.3)

localeval NPM version 15.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on localeval and may be impacted: - camp 15.2.23 - fleau 15.2.18 Source cves: unknown CVE Source advisory: OSV:GHSA-MMQV-M45H-Q2HP...

GHSA-MMQV-M45H-Q2HP Sandbox Breakout / Arbitrary Code Execution in localeval

All versions of localeval are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through constructor.constructor. This may allow attackers to execute arbitrary code in the system. Evaluating the payload...

Sandbox Breakout / Arbitrary Code Execution in localeval

All versions of localeval are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through constructor.constructor. This may allow attackers to execute arbitrary code in the system. Evaluating the payload...