{"action":"Upgrade static-eval to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"static-eval","cve_ids":["CVE-2017-16226"],"ecosystem":"npm","epss":0.03541,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-5mjw-6jrh-hvfq","id":"tcs_01M5KF45XADD3XCW0N8GW1EH7Z","modified_at":"2023-11-08T03:59:12.567883Z","published_at":"2018-08-06T21:37:06Z","references":["https://osv.dev/vulnerability/GHSA-5mjw-6jrh-hvfq","https://nvd.nist.gov/vuln/detail/CVE-2017-16226","https://github.com/substack/static-eval/pull/18","https://github.com/advisories/GHSA-5mjw-6jrh-hvfq","https://maustin.net/articles/2017-10/static_eval","https://www.npmjs.com/advisories/548"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-5mjw-6jrh-hvfq","url":"https://osv.dev/vulnerability/GHSA-5mjw-6jrh-hvfq"},{"source":"nvd","source_id":"CVE-2017-16226","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16226"}],"summary":"Sandbox Breakout / Arbitrary Code Execution in static-eval"}