[jedschmidt]

Not _quite_ arbitrary; the only code run is that generated by lave. Arbitrary code present in functions is parsed, but not run.

[conradev]

But if there is a persistence or network layer involved, when compromised, it could function as an injection vector into the application, right?

[jedschmidt]

Sure, as it could with any part of your app, including wherever your JSON.parse code lives.