Known Vulnerabilities for Safe-eval by Safe-eval Project

Listed below are 5 of the newest known vulnerabilities associated with "Safe-eval" by "Safe-eval Project".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE	Shortened Description	Severity	Publish Date	Last Modified
CVE-2023-26122 json	All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability ...	10 - CRITICAL	2023-04-11	2023-11-07
CVE-2023-26121 json	All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper saniti...	10 - CRITICAL	2023-04-11	2023-11-07
CVE-2022-25904 json	All versions of package safe-eval are vulnerable to Prototype Pollution which allows an attacker to add or modify properties ...	9.8 - CRITICAL	2022-12-20	2022-12-29
CVE-2020-7710 json	This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machin...	9.8 - CRITICAL	2020-08-21	2021-07-21
CVE-2017-16088 json	The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user inp...	10 - CRITICAL	2018-06-07	2019-10-09

Known Affected Configurations (CPE V2.3)

Type	Vendor	Product	Version
Application	Safe-eval Project	Safe-eval	0.4.1
Application	Safe-eval Project	Safe-eval	0.4.0
Application	Safe-eval Project	Safe-eval	0.3.0
Application	Safe-eval Project	Safe-eval	0.2.0
Application	Safe-eval Project	Safe-eval	0.1.0
Application	Safe-eval Project	Safe-eval	0.0.0