EPSS
Percentile
69.4%
safe-eval is vulnerable to prototype pollution. The vulnerability exists in the safeEval function in index.js, because it allows an attacker to add or modify Object.prototype.Consolidate properties.
safeEval
index.js
Object.prototype.Consolidate
github.com/advisories/GHSA-33vh-7x8q-mg35
github.com/hacksparrow/safe-eval/blob/0.4.1/index.js#L24
github.com/hacksparrow/safe-eval/issues/26