Description
This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine.
Remediation
References
https://github.com/hacksparrow/safe-eval/issues/19
https://snyk.io/vuln/SNYK-JS-SAFEEVAL-608076
Related Vulnerabilities
CVE-2023-40350 Vulnerability in maven package org.jenkins-ci.plugins:docker-swarm
CVE-2021-21369 Vulnerability in maven package org.hyperledger.besu:plugin-api
CVE-2018-20835 Vulnerability in maven package org.webjars.npm:tar-fs
CVE-2021-3766 Vulnerability in npm package objection
CVE-2009-4611 Vulnerability in maven package org.mortbay.jetty:jetty