Version Details and Security Vulnerabilities

📦

localeval

13.5.29

Comparision Betweeen 13.5.29 and 13.5.13

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

N/A

Unpacked Size

N/A

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.

Version Details and Security Vulnerabilities

📦

localeval

13.5.29

Comparision Betweeen 13.5.29 and 13.5.13

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

N/A

Unpacked Size

N/A

Security Vulnerabilities

Security Details

Comprehensive list of direct or transitive vulnerabilities for version 13.5.29 of the package localeval.

All Security Vulnerabilities

All the vulnerabilities related to the version 13.5.29 of the package

Summary:

Sandbox Breakout / Arbitrary Code Execution in localeval

Details:

All versions of localeval are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through constructor.constructor. This may allow attackers to execute arbitrary code in the system. Evaluating the payload

constructor.constructor("return process.env")()

returns the contents of process.env.

Recommendation

No fix is currently available. Consider using an alternative package until a fix is made available.

Details about localeval@13.5.29

Security Details

Comprehensive list of direct or transitive vulnerabilities for version 13.5.29 of the package localeval.

All Security Vulnerabilities

All the vulnerabilities related to the version 13.5.29 of the package

Summary:

Sandbox Breakout / Arbitrary Code Execution in localeval

Details:

constructor.constructor("return process.env")()

returns the contents of process.env.

Recommendation

No fix is currently available. Consider using an alternative package until a fix is made available.

Details about localeval@13.5.29

Version Details and Security Vulnerabilities

localeval

Comparision Betweeen 13.5.29 and 13.5.13

Security Vulnerabilities

Version Details and Security Vulnerabilities

localeval

Comparision Betweeen 13.5.29 and 13.5.13

Security Vulnerabilities

Security Details

All

Transitive Dependencies

Package

All Security Vulnerabilities

Recommendation

Security Details

All

Transitive Dependencies

Package

All Security Vulnerabilities

Recommendation

Version Details and Security Vulnerabilities

localeval

Comparision Betweeen 13.5.29 and 13.5.13

Security Vulnerabilities

Version Details and Security Vulnerabilities

localeval

Comparision Betweeen 13.5.29 and 13.5.13

Security Vulnerabilities

Security Details

All

Transitive Dependencies

Package

All Security Vulnerabilities

localeval@13.5.29 GHSA-mmqv-m45h-q2hp N/A

Recommendation

Security Details

All

Transitive Dependencies

Package

All Security Vulnerabilities

localeval@13.5.29 GHSA-mmqv-m45h-q2hp N/A

Recommendation