Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:13351
HistoryFeb 15, 2019 - 2:43 a.m.

Arbitrary Code Execution

2019-02-1502:43:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
JSON

static-eval is vulnerable to arbitrary code execution. The vulnerability is possible because there is no protection by sandbox isolated process, allowing the user to input malicious code through it.

CPENameOperatorVersion
static-evalle2.0.0
static-evalle2.0.0

Related

github 1
cve 1
ibm 2
github
github
Withdrawn: Arbitrary Code Execution in static-eval
2021-05-06 16:11:25
cve
cve
CVE-2021-23334
2021-02-11 12:15:00
ibm
ibm
Security Bulletin: A security vulnerability in Node.js lodash module affects IBM Cloud Pak for Multicloud Management Managed Service
2021-05-19 17:14:40
Security Bulletin: IBM Watson OpenScale on Cloud Pak for Data is impacted by Vulnerabilities in Node.js
2021-04-16 14:32:44
JSON
Related for VERACODE:13351
github1cve1ibm2