npm/safer-eval CVE-2019-10760: critical 9.9, EPSS 2.88%
Sandbox Breakout / Arbitrary Code Execution in safer-eval
Action: Upgrade safer-eval to 1.3.2 or later.
npm i safer-eval@1.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.2 | - |
Fixed versions
| 1.3.2 |
Sources
- osv: GHSA-hgch-jjmr-gp7w
- https://nvd.nist.gov/vuln/detail/CVE-2019-10760
- https://github.com/commenthol/safer-eval/commit/1c29f6a6e304fb650c05056e217e457a0d2cc3c5
- https://snyk.io/vuln/SNYK-JS-SAFEREVAL-473029
- https://www.npmjs.com/advisories/787
CVE-2019-10760 · published · modified · JSON