Seongil-Wi

**Name of the Vulnerable Software and Affected Versions** safe-eval versions all **Description** The issue arises from improper sanitization of the parameter content in the `safeEval` function, leading to Prototype Pollution. This affects all versions of the safe-eval package. **Recommendations** For all versions, consider disabling the `safeEval` function as a temporary workaround until a patch is available. Restrict access to the `safeEval` function to minimize the risk of exploitation. Avoid using the `safeEval` function with untrusted input until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** safe-eval versions all versions **Description** The issue arises from improper input sanitization, leading to a Sandbox Bypass vulnerability. This vulnerability is derived from prototype pollution exploitation and may result in remote code execution (RCE). Vulnerable functions include ` defineGetter `, `stack()`, `toLocaleString()`, `propertyIsEnumerable.call()`, and `valueOf()`. **Recommendations** For all versions, consider disabling the vulnerable functions ` defineGetter `, `stack()`, `toLocaleString()`, `propertyIsEnumerable.call()`, and `valueOf()` as a temporary workaround until a patch is available. Restrict input to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.