> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Tainted code injection from http request deepsemgrep

> **tainted-code-injection-from-http-request-deepsemgrep**
>
> Passing unsanitized user input to a Script Engine or other means of dynamic code evaluation is unsafe. This could lead to code injection with data leakage or arbitrary code execution as a result. Avoid this, or use proper sandboxing if user code evaluation is intended.\
> **Likelihood**: HIGH\
> **Confidence**: HIGH\
> **CWE**: \
> \- CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
> \
> **OWASP**: \
> \- A03:2021 - Injection


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.