VYPR

Safe Eval Node Module

Sign in to watch

by Hackerone

CVEs (1)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2017-160880.000.02Jun 7, 2018The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox.