Lucene search
+L
Safer-eval ProjectSafer-eval

3 matches found

CVE
CVE
added 2019/12/06 10:49 p.m.192 views

CVE-2019-10769

The provided data indicates CVE-2019-10769 affects the npm package safer-eval, which sandboxed evaluation uses the eval function. The vulnerability is described as Arbitrary Code Execution via generating a RangeError, with a detailed PoC published in the Huntr entry for safer-eval (1-NPM-SAFER-EV...

9.8CVSS9.5AI score0.02574EPSS
Save
CVE
CVE
added 2019/10/15 2:53 p.m.89 views

CVE-2019-10760

Safer-eval prior to 1.3.2 is vulnerable to sandbox escape via constructor properties, enabling arbitrary code execution. Affected component: safer-eval (

9.9CVSS9.8AI score0.02852EPSS
Save
CVE
CVE
added 2019/10/15 2:47 p.m.62 views

CVE-2019-10759

The CVE-2019-10759 issue affects safer-eval prior to 1.3.4. A payload leveraging constructor properties can escape the sandbox and execute arbitrary code, giving an attacker arbitrary code execution. Documented impact is high for remote code execution with network access and no user interaction r...

9.9CVSS9.7AI score0.01787EPSS
Save