critical10.0
CVE-2017-16088
The safe-eval module describes itself as a safer version of eval.
Impact
The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Safe-Eval Project | Safe-Eval | Versions 0.0.0, 0.1.0, 0.2.0, 0.3.0 |