CVE-2017-16088

CVE-2017-16088 describes a critical vulnerability in the safe-eval module, which purports to be a secure alternative to JavaScript's eval function. This flaw allows attackers to bypass the sandbox by accessing object constructors, enabling them to execute arbitrary code and access the entire standard library. With a CVSS score of 10.0, this vulnerability poses a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. Despite its critical severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.