Vulnerabilities in static-eval