Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-7710 1 Safe-eval Project 1 Safe-eval 2024-11-21 8.1 High
This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine.
CVE-2017-16088 1 Safe-eval Project 1 Safe-eval 2024-11-21 N/A
The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox.