GitHub Advisoryadvisory · npm

GHSA-4wv4-mgfq-598v Code injection in nobelprizeparser

CRITICAL Published 2021-03-12 Modified 2021-03-12 Official page ↗

Ecosystem: npm
Packages: nobelprizeparser
Severity: Critical
Weaknesses: CWE-94
Reviewed: 2021-03-12

Affected packages

• npm nobelprizeparser: < 1.0.2 → fixed in 1.0.2

Description

Code injection through use of eval.

Related

Weakness · CWE (1)

CWE-94 Improper Control of Generation of Code weakness

References