@enspirit/elo vulnerabilities (npm)
3 vulnerabilities.
-
@enspirit/elonpm Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitter 9.8 Critical -
@enspirit/elonpm Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels 9.8 Critical -
@enspirit/elonpm Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fields 7.4 High