Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21708
HistoryOct 16, 2019 - 4:37 a.m.

Prototype Pollution

2019-10-1604:37:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.001

Percentile

48.2%

safer-eval is vulnerable to prototype pollution. A lack of validation allows an attacker to inject arbitrary objects using Object.constructor to execute arbitrary code.

EPSS

0.001

Percentile

48.2%