New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Security Vulnerability with static-eval@2.0.2 #154

Open

skvijay007 opened this issue Feb 18, 2021 · 2 comments

skvijay007 commented Feb 18, 2021

Issue picked up and reported in Snyk: https://snyk.io/vuln/SNYK-JS-STATICEVAL-1056765

natyleitner commented Feb 26, 2021

Any chance of using the POC solution here?

chunkbro commented Mar 11, 2021

JFrog Xray scan shows Arbitrary Code execution vulnerability for static-eval@2.0.2 and jsonpath@1.1.0 is flagged.

# for free to join this conversation on GitHub. Already have an account? # to comment