Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access | Critical 9.8 | 18 hours ago | 18 hours ago |
|
|
Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels | Critical 9.8 | 18 hours ago | 18 hours ago |
|
|
Elo backends have code injection via unvalidated emission of programmatic AST fields | High Risk 7.4 | 18 hours ago | 18 hours ago |
Page 1