Severity: Critical
CVSS Score: 9.8
This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine.