Old versions of
bassmaster, a Hapi server plugin used to process batches of requests, use the
eval method as part of its processing and validation of user input.
eval function without limitation.
Update to bassmaster version 1.5.2 or greater.
Snyk patch available for versions:
- <=1.5.1 >=0.4.0 || <=0.3.0 >=0.0.1