Skip to main content
cve.nowby Sazabi
← npm
npmPackage

safe-eval

5 known vulnerabilities (4 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 4 high
Registry
npm

Advisories 5

  • All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization.

    Affected: through 0.4.2.

  • All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its…

    Affected: through 0.4.2.

  • Prototype Pollution

    Affected: through 0.4.1.

  • Sandbox Escape

    Affected: through 0.4.1.

  • The safe-eval module describes itself as a safer version of eval.

    Affected: through 0.3.0.