CVE-2023-26122

CVE-2023-26122

All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation.
Exploiting this vulnerability might result in remote code execution ("RCE").

**Vulnerable functions:**

__defineGetter__, stack(), toLocaleString(), propertyIsEnumerable.call(), valueOf().

Source: CVE-2023-26122

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다