camp (15.2.23), directdetect (>=1.0.0, <=1.2.0) +3 more potentially affected by unknown CVE via localeval (>=13.12.11, <=15.2.3)

localeval NPM version =13.12.11, =1.0.0, =1.0.0, =1.0.1 - mocha-test-runner 0.4.3 Source cves: unknown CVE Source advisory: MEND:WS-2020-0086...

WS-2020-0086

localeval through 15.2.3 is vulnerable to Sandbox Escape leading to Remote Code Execution...

camp (15.2.23), directdetect (>=1.0.0, <=1.2.0) +3 more potentially affected by unknown CVE via localeval (>=13.12.11, <=15.2.3)

localeval NPM version =13.12.11, =1.0.0, =1.0.0, =1.0.1 - mocha-test-runner 0.4.3 Source cves: unknown CVE Source advisory: GHSA-MMQV-M45H-Q2HP...

camp (15.2.23), fleau (15.2.18) potentially affected by unknown CVE via localeval (15.2.3)

localeval NPM version 15.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on localeval and may be impacted: - camp 15.2.23 - fleau 15.2.18 Source cves: unknown CVE Source advisory: OSV:GHSA-MMQV-M45H-Q2HP...

GHSA-MMQV-M45H-Q2HP Sandbox Breakout / Arbitrary Code Execution in localeval

All versions of localeval are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through constructor.constructor. This may allow attackers to execute arbitrary code in the system. Evaluating the payload...

Sandbox Breakout / Arbitrary Code Execution in localeval

All versions of localeval are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through constructor.constructor. This may allow attackers to execute arbitrary code in the system. Evaluating the payload...

PT-2020-21412

Name of the Vulnerable Software and Affected Versions localeval versions affected versions not specified Description The issue allows for Sandbox Escape leading to Remote Code Execution due to the package's failure to restrict access to the main context through constructor.constructor. This could...