Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38550
HistoryDec 21, 2022 - 6:05 a.m.

Prototype Pollution

2022-12-2106:05:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
safe-eval
prototype pollution
vulnerability
safeeval function
index.js
object properties

EPSS

0.003

Percentile

69.4%

safe-eval is vulnerable to prototype pollution. The vulnerability exists in the safeEval function in index.js, because it allows an attacker to add or modify Object.prototype.Consolidate properties.

EPSS

0.003

Percentile

69.4%

Related for VERACODE:38550