Description
access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the `template` function is executed by the `eval` function resulting in code execution.
Remediation
References
https://snyk.io/vuln/SNYK-JS-ACCESSPOLICY-571490
Related Vulnerabilities
CVE-2022-2421 Vulnerability in npm package socket.io-parser
CVE-2023-36106 Vulnerability in maven package tech.powerjob:powerjob
CVE-2020-36144 Vulnerability in npm package redash
CVE-2021-21122 Vulnerability in maven package org.webjars.npm:electron
CVE-2021-21361 Vulnerability in maven package com.bmuschko:gradle-vagrant-plugin