Known Vulnerabilities in static-eval