Vulnerabilities (CVE)

Filtered by vendor Static-eval Project Subscribe
Filtered by product Static-eval
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-16226 1 Static-eval Project 1 Static-eval 2024-02-04 7.5 HIGH 9.8 CRITICAL
The static-eval module is intended to evaluate statically-analyzable expressions. In affected versions, untrusted user input is able to access the global function constructor, effectively allowing arbitrary code execution.