@enspirit/elo
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access | @enspirit/elo | npm | Critical | Fix reported | |
| Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels | @enspirit/elo | npm | Critical | Fix reported | |
| Elo backends have code injection via unvalidated emission of programmatic AST fields | @enspirit/elo | npm | High | Fix reported |