CVE-2023-26122

All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation. Exploiting this vulnerability might result in remote code execution ("RCE"). **Vulnerable functions:** __defineGetter__, stack(), toLocaleString(), propertyIsEnumerable.call(), valueOf().

• CWE-265
• CWE-1321
• CWE-1321

• https://gist.github.com/seongil-wi/2db6cb884e10137a93132b7f74879cceExploit, Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/27Exploit, Issue Tracking, Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/31Exploit, Issue Tracking, Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/32Exploit, Issue Tracking, Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/33Exploit, Issue Tracking, Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/34Exploit, Issue Tracking, Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/35Exploit, Issue Tracking, Third Party Advisory
• https://security.snyk.io/vuln/SNYK-JS-SAFEEVAL-3373064Exploit, Issue Tracking, Third Party Advisory
• https://gist.github.com/seongil-wi/2db6cb884e10137a93132b7f74879cceExploit, Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/27Exploit, Issue Tracking, Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/31Exploit, Issue Tracking, Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/32Exploit, Issue Tracking, Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/33Exploit, Issue Tracking, Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/34Exploit, Issue Tracking, Third Party Advisory
• https://github.com/hacksparrow/safe-eval/issues/35Exploit, Issue Tracking, Third Party Advisory
• https://security.snyk.io/vuln/SNYK-JS-SAFEEVAL-3373064Exploit, Issue Tracking, Third Party Advisory

Published

Apr 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26117Versions of the package angular from 1.0.0 are vulnerable to…5.3
• CVE-2023-26118Versions of the package angular from 1.4.9 are vulnerable to…5.3
• CVE-2023-26119Versions of the package net.sourceforge.htmlunit:htmlunit fr…9.8
• CVE-2023-2612Jean-Baptiste Cayrou discovered that the shiftfs file system…4.7
• CVE-2023-26120This affects all versions of the package com.xuxueli:xxl-job…6.1
• CVE-2023-26121All versions of the package safe-eval are vulnerable to Prot…10
• CVE-2023-26123Versions of the package raysan5/raylib before 4.5.0 are vuln…6.1
• CVE-2023-26125Versions of the package github.com/gin-gonic/gin before 1.9.…7.3
• CVE-2023-26126All versions of the package m.static are vulnerable to Direc…5.3
• CVE-2023-26127All versions of the package n158 are vulnerable to Command I…7.8
• CVE-2023-26128All versions of the package keep-module-latest are vulnerabl…7.8
• CVE-2023-26129All versions of the package bwm-ng are vulnerable to Command…7.8