GrepRules
Sign inPublish rule
Explore/cve-2025-53626-src-expression-ts-cwe-79-cve-2025-53626

CVE-2025-53626: Src Expression Ts Cwe 79 Cve 2025 53626

Exposing the raw global `Object` alongside other built-ins often indicates an evaluation context or sandbox creation. Passing the raw `Object` allows attackers to access reflection and prototype manipulation methods (e.g., `Object.getPrototypeOf`, `Object.getOwnPropertyDescriptor`). This can lead to sandbox escape, arbitrary code execution, or prototype poll

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0JS
greprules fetch cve-2025-53626-src-expression-ts-cwe-79-cve-2025-53626 --engine opengrep

Description

Exposing the raw global `Object` alongside other built-ins often indicates an evaluation context or sandbox creation. Passing the raw `Object` allows attackers to access reflection and prototype manipulation methods (e.g., `Object.getPrototypeOf`, `Object.getOwnPropertyDescriptor`). This can lead to sandbox escape, arbitrary code execution, or prototype poll

License
Apache-2.0
Source context
Public repository
Source
Provally CVE rule catalog
Validation status
Verified
Quality signals
146 downloads0 direct146 via packs
· 0 stars · Quality score 68How quality works
Included packs
2 packs