{"id":"GHSA-4wv4-mgfq-598v","aliases":[],"status":"published","title":"Code injection in nobelprizeparser","description":"Code injection through use of eval.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-94"],"published":"2021-03-12T23:00:19Z","modified":"2023-01-09T05:04:27Z","fixes":[{"ecosystem":"npm","package":"nobelprizeparser","fixed_in":["1.0.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"nobelprizeparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2"}]}]},{"source":"osv","ecosystem":"npm","package":"nobelprizeparser","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.2"}]}]}],"references":[{"url":"https://github.com/AnneTheDev/nobelprize/security/advisories/GHSA-4wv4-mgfq-598v","tags":["web"]},{"url":"https://github.com/AnneTheDev/nobelprize/commit/00639d375b0efd097bc1eca18d9dc021691b9286","tags":["web"]},{"url":"https://www.npmjs.com/package/nobelprizeparser","tags":["web"]},{"url":"https://github.com/advisories/GHSA-4wv4-mgfq-598v"}],"sources":{"ghsa":[{"id":"GHSA-4wv4-mgfq-598v","title":"Code injection in nobelprizeparser","description":"Code injection through use of eval.","status":"published","published":"2021-03-12T23:00:19Z","modified":"2023-01-09T05:04:27Z","cwes":["CWE-94"],"updated_at":"2026-11-02T14:36:10.502376Z"}],"osv":[{"id":"GHSA-4wv4-mgfq-598v","title":"Code injection in nobelprizeparser","description":"Code injection through use of eval.","status":"published","published":"2021-03-12T23:00:19Z","modified":"2021-03-12T19:13:27Z","cwes":["CWE-94"],"updated_at":"2026-11-02T15:46:37.528068Z"}]}}