Well, skimming the vulnerabilities [1] didn&#x27;t really see anything too interesting. Consider this &quot;eval_remote&quot; vulnerability:<p><pre><code>   var e = require(&quot;express&quot;);
   var DVNA = e();
   DVNA.get(&#x27;&#x2F;&#x27;, function(req, res) {
     var res = eval(&quot;(&quot;+req.query.e+&quot;)&quot;);
     res.send(&#x27;Parameter eval():&lt;br&gt; &#x27; + res);
   });
   DVNA.listen(6666);
</code></pre>
Yes, if you eval your requests that is a vulnerability, but it is a trivial one. I was expecting some side-channel esoteric stuff that, reading the code, you wouldn&#x27;t necessarily see the problem.<p>1 - <a href="https:&#x2F;&#x2F;github.com&#x2F;quantumfoam&#x2F;DVNA&#x2F;tree&#x2F;master&#x2F;vulnerabilities" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;quantumfoam&#x2F;DVNA&#x2F;tree&#x2F;master&#x2F;vulnerabilit...</a>