CVE-2020-7710

This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine.

• CWE-94

• https://github.com/hacksparrow/safe-eval/issues/19Exploit, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-SAFEEVAL-608076Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/19Exploit, Third Party Advisory
• https://snyk.io/vuln/SNYK-JS-SAFEEVAL-608076Third Party Advisory

Published

Aug 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7704The package linux-cmdline before 1.0.1 are vulnerable to Pro…9.8
• CVE-2020-7705This affects the package MintegralAdSDK from 0.0.0. The SDK …8.1
• CVE-2020-7706The package connie-lang before 0.1.1 are vulnerable to Proto…9.8
• CVE-2020-7707The package property-expr before 2.0.3 are vulnerable to Pro…9.8
• CVE-2020-7708The package irrelon-path before 4.7.0; the package @irrelon/…9.8
• CVE-2020-7709This affects the package json-pointer before 0.6.1. Multiple…7.2
• CVE-2020-7711This affects all versions of package github.com/russellhaeri…7.5
• CVE-2020-7712This affects the package json before 10.0.0. It is possible …7.2
• CVE-2020-7713All versions of package arr-flatten-unflatten are vulnerable…9.8
• CVE-2020-7714All versions of package confucious are vulnerable to Prototy…9.8
• CVE-2020-7715All versions of package deep-get-set are vulnerable to Proto…9.8
• CVE-2020-7716All versions of package deeps are vulnerable to Prototype Po…9.8