En resumen
- CVE-2023-26121 es una vulnerabilidad CRÍTICO (CVSS 10.0) que afecta a safe-eval (safe-eval project), safe-eval.
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 66.1% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
| Package | Affected versions | Patched versions |
|---|
| safe-eval | ≤ 0.4.1
| No fix yet |
| safe-eval npm | ≤ 0.4.2
| No fix yet |
Description
All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its parameter content.
NVD description
All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its parameter content.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free