npm/localeval: critical
Sandbox Breakout / Arbitrary Code Execution in localeval
Action: Upgrade localeval to 15.3.0 or later.
npm i localeval@15.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 15.3.0 | - |
Fixed versions
| 15.3.0 |
Sources
- osv: GHSA-mmqv-m45h-q2hp
- https://github.com/espadrine/localeval/issues/9
- https://github.com/espadrine/localeval/commit/823f112c793b8fae051eeddad61d4ed29804a56c
- https://github.com/espadrine/localeval/commit/ce985eba77a5f89a7f718727cbaa7fb14da40335
- https://github.com/espadrine/localeval
published · modified · JSON