CVE-2023-26122 (published 2023-04-11T05:00:02.658Z)
All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation.Exploiting this vulnerability might result in remote code execution ("RCE").**Vulnerable functions:**__defineGetter__, stack(), toLocaleString(), propertyIsEnumerable.call(),  valueOf().
Affected products: Vendor: n/a
Product: safe-eval
Versions: 0