Lucene search
Veracode Vulnerability DatabaseVERACODE:6439HistoryMay 31, 2018 - 3:12 a.m.
Arbitrary Code Execution
2018-05-3103:12:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
0.015 Low
EPSS
Percentile
87.1%
static-eval is vulnerable to arbitrary code execution attacks. The vulnerability exists due to a sandbox escape issue where an unsanitized user input can lead to arbitrary code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| static-eval | le | 1.1.1 | |
| static-eval | eq | 0.2.0 |
Related
cvelist
cvelist
CVE-2017-16226
2018-04-26 00:00:00
nodejs
nodejs
Sandbox Breakout / Arbitrary Code Execution
2017-10-17 23:19:54
github
github
Sandbox Breakout / Arbitrary Code Execution in static-eval
2018-08-06 21:37:06
cve
cve
CVE-2017-16226
2018-06-07 02:29:07
osv
osv
CVE-2017-16226
2018-06-07 02:29:07
Sandbox Breakout / Arbitrary Code Execution in static-eval
2018-08-06 21:37:06
nvd
nvd
CVE-2017-16226
2018-06-07 02:29:07
prion
prion
Code injection
2018-06-07 02:29:00