Description
mosc through 1.0.0 is vulnerable to Arbitrary Code Execution. User input provided to `properties` argument is executed by the `eval` function, resulting in code execution.
Remediation
References
https://snyk.io/vuln/SNYK-JS-MOSC-571492
Related Vulnerabilities
CVE-2020-11022 Vulnerability in maven package org.webjars:jquery
CVE-2023-40167 Vulnerability in maven package org.eclipse.jetty:jetty-http
CVE-2022-23913 Vulnerability in maven package org.apache.activemq:artemis-commons
CVE-2023-26127 Vulnerability in npm package n158
CVE-2022-25301 Vulnerability in npm package jsgui-lang-essentials