Description
cd-messenger through 2.7.26 is vulnerable to Arbitrary Code Execution. User input provided to the `color` argument executed by the `eval` function resulting in code execution.
Remediation
References
https://snyk.io/vuln/SNYK-JS-CDMESSENGER-571493
Related Vulnerabilities
CVE-2022-45146 Vulnerability in maven package org.bouncycastle:bc-fips-debug
CVE-2020-36048 Vulnerability in npm package engine.io
CVE-2022-1929 Vulnerability in npm package devcert
CVE-2018-19056 Vulnerability in maven package org.webjars.bowergithub.pandao:editor.md
CVE-2023-37899 Vulnerability in npm package @feathersjs/socketio