{"action":"Upgrade localeval to 15.3.0 or later.","affected":[{"fixed":"15.3.0","introduced":"0"}],"component":"localeval","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["15.3.0"],"ghsa_id":"GHSA-mmqv-m45h-q2hp","id":"tcs_01M5KG14B0BGBHBXSA2PFTWVFG","modified_at":"2026-02-03T03:17:19.972456Z","published_at":"2020-09-04T15:22:40Z","references":["https://osv.dev/vulnerability/GHSA-mmqv-m45h-q2hp","https://github.com/espadrine/localeval/issues/9","https://github.com/espadrine/localeval/commit/823f112c793b8fae051eeddad61d4ed29804a56c","https://github.com/espadrine/localeval/commit/ce985eba77a5f89a7f718727cbaa7fb14da40335","https://github.com/espadrine/localeval"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-mmqv-m45h-q2hp","url":"https://osv.dev/vulnerability/GHSA-mmqv-m45h-q2hp"}],"summary":"Sandbox Breakout / Arbitrary Code Execution in localeval"}