safer-eval before 1.3.4 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: snyk

Published: 2019-10-15T14:47:19

Updated: 2024-08-04T22:32:01.921Z

Reserved: 2019-04-03T00:00:00

Link: CVE-2019-10759

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-10-15T15:15:11.120

Modified: 2024-11-21T04:19:51.997

Link: CVE-2019-10759

cve-icon Redhat

No data.