IMO the only bug with $eval() is that it doesn't return a "Too many parameters" error if more than two parameters are given. Beyond that there's really no bugs since it's undocumented and, as far as I know, unintended behaviour that it evaluates additional parameters at all.
