Safe-Eval · Safe-Eval · CVE-2023-26122
**Name of the Vulnerable Software and Affected Versions**
safe-eval versions all versions
**Description**
The issue arises from improper input sanitization, leading to a Sandbox Bypass vulnerability. This vulnerability is derived from prototype pollution exploitation and may result in remote code execution (RCE). Vulnerable functions include ` defineGetter `, `stack()`, `toLocaleString()`, `propertyIsEnumerable.call()`, and `valueOf()`.
**Recommendations**
For all versions, consider disabling the vulnerable functions ` defineGetter `, `stack()`, `toLocaleString()`, `propertyIsEnumerable.call()`, and `valueOf()` as a temporary workaround until a patch is available. Restrict input to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.