safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: snyk

Published: 2019-10-15T14:53:11

Updated: 2024-08-04T22:32:01.515Z

Reserved: 2019-04-03T00:00:00

Link: CVE-2019-10760

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-10-15T15:15:11.167

Modified: 2024-11-21T04:19:52.117

Link: CVE-2019-10760

cve-icon Redhat

No data.