Описание
safe-eval vulnerable to Prototype Pollution via the safeEval function
All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its parameter content.
Пакеты
Наименование
safe-eval
npm
Затронутые версииВерсия исправления
<= 0.4.2
Отсутствует
Связанные уязвимости
CVSS3: 7.5
nvd
почти 3 года назад
All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its parameter content.