CVE-2019-10769 Vulnerability in maven package org.webjars.npm:safer-eval

Description

safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError.

Remediation

References

https://snyk.io/vuln/SNYK-JS-SAFEREVAL-534901

https://github.com/commenthol/safer-eval/security/advisories/GHSA-v63x-xc9j-hhvq

Related Vulnerabilities

CVE-2022-21231 Vulnerability in npm package deep-get-set

CVE-2023-48796 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-worker

CVE-2022-41940 Vulnerability in maven package org.webjars.npm:engine.io

CVE-2020-6427 Vulnerability in npm package electron

CVE-2017-16141 Vulnerability in npm package lab6drewfusbyu

Severity

Critical

Classification

CWE-94 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H