High severityNVD Advisory· Published Dec 11, 2014· Updated Jun 17, 2026
CVE-2014-7192
CVE-2014-7192
Description
Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
syntax-errornpm | < 1.1.1 | 1.1.1 |
Affected products
2Patches
Vulnerability mechanics
References
8- github.com/substack/node-syntax-error/commit/9aa4e66eb90ec595d2dba55e6f9c2dd9a668b309nvdExploitWEB
- github.com/advisories/GHSA-5726-g6r9-5f22ghsaADVISORY
- nodesecurity.io/advisories/syntax-error-potential-script-injectionnvdVendor Advisory
- nvd.nist.gov/vuln/detail/CVE-2014-7192ghsaADVISORY
- www-01.ibm.com/support/docview.wssnvdWEB
- exchange.xforce.ibmcloud.com/vulnerabilities/96728nvdWEB
- github.com/substack/node-browserify/blob/master/changelog.markdownghsaWEB
- www.npmjs.com/advisories/37ghsaWEB
News mentions
0No linked articles in our index yet.