CVE-2017-16226

2018-06-0702:29:07

Google

osv.dev

9.8 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.1%

JSON

The static-eval module is intended to evaluate statically-analyzable expressions. In affected versions, untrusted user input is able to access the global function constructor, effectively allowing arbitrary code execution.

CPENameOperatorVersion
static-evaleq0.2.1
static-evaleq0.2.2
static-evaleq1.0.0
static-evaleq0.1.0
static-evaleq1.1.0
static-evaleq1.1.1
static-evaleq0.2.3
static-evaleq0.1.1
static-evaleq0.0.0
static-evaleq0.2.0

Name	Operator	Version
static-eval	eq	0.2.1
static-eval	eq	0.2.2
static-eval	eq	1.0.0
static-eval	eq	0.1.0
static-eval	eq	1.1.0
static-eval	eq	1.1.1
static-eval	eq	0.2.3
static-eval	eq	0.1.1
static-eval	eq	0.0.0
static-eval	eq	0.2.0