CVE-2017-16088
CVE-2017-16088
The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox.
Affected products
HackerOne · safe-eval node moduleWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →