Description
This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine.
Remediation
References
https://github.com/hacksparrow/safe-eval/issues/19
https://snyk.io/vuln/SNYK-JS-SAFEEVAL-608076
Related Vulnerabilities
CVE-2021-21353 Vulnerability in npm package pug-code-gen
CVE-2021-45046 Vulnerability in maven package org.apache.logging.log4j:log4j-core
CVE-2022-3145 Vulnerability in npm package @okta/oidc-middleware
CVE-2019-0194 Vulnerability in maven package org.apache.camel:camel-core
CVE-2017-16116 Vulnerability in maven package org.webjars.npm:string