CVE-2024-21539

Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability...

ESLint Rewrite 安全漏洞

ESLint Rewrite is an ESLint open source application. A security vulnerability exists in ESLint Rewrite versions prior to 0.2.3, which stems from improper input cleanup and is susceptible to regular expression denial of service attacks...

@2digits/eslint-config (>=2.6.0, <=2.7.0), @2digits/eslint-plugin (>=2.2.9, <=2.3.0) +37 more potentially affected by CVE-2024-21539 via @eslint/plugin-kit (0.1.0)

@eslint/plugin-kit NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @eslint/plugin-kit and may be impacted: - @2digits/eslint-config =2.6.0, =2.2.9, =0.0.133, =1.23.46, =2.0.1, =20240910.35.32, =13.2.8, =2024.3.44, =2024.3.45 -...

Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit

Crafting a very large and well crafted string can increase the CPU usage and crash the program. POC js const ConfigCommentParser = require"@eslint/plugin-kit"; var str = ""; for var i = 0; i 1000000; i++ str += " "; str += "A"; console.log"start" var parser = new ConfigCommentParser;...

GHSA-7Q7G-4XM8-89CQ vulnerabilities

Vulnerabilities for packages: eslint...

GHSA-7Q7G-4XM8-89CQ vulnerabilities

Vulnerabilities for packages: eslint...

GHSA-7Q7G-4XM8-89CQ Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit

Crafting a very large and well crafted string can increase the CPU usage and crash the program. POC js const ConfigCommentParser = require"@eslint/plugin-kit"; var str = ""; for var i = 0; i 1000000; i++ str += " "; str += "A"; console.log"start" var parser = new ConfigCommentParser;...

MAL-2024-10754 Malicious code in marketing-eslint-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46bae4acafe501ce5a6db336abe236e4483102beedc92511c9b5b7ad37b83c20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in marketing-eslint-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46bae4acafe501ce5a6db336abe236e4483102beedc92511c9b5b7ad37b83c20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-wms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b20357cf95acf41bc1718eeb796b29f01f318a9874d59cd4ef1a87dd4cadc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10665 Malicious code in eslint-plugin-wms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b20357cf95acf41bc1718eeb796b29f01f318a9874d59cd4ef1a87dd4cadc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10664 Malicious code in eslint-plugin-unusedvar-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a5ddb66be17d69ec5984d63784684b3865c8a316f79aef7f59107336182947 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-ssc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd44b1dc2a7c0a52132eee12cd12dfc07abdf093ae71052bfac7ea29771b985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10663 Malicious code in eslint-plugin-ssc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd44b1dc2a7c0a52132eee12cd12dfc07abdf093ae71052bfac7ea29771b985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-shopee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a491d7ca4f79d0761b84a5784731279e82a28cf0aa3be6840e20b003a2543ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10662 Malicious code in eslint-plugin-shopee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a491d7ca4f79d0761b84a5784731279e82a28cf0aa3be6840e20b003a2543ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-module-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afc57b3b316c94a93252629b2c608c1e0dfd28fa51024ff8e2957db8efb8d48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10661 Malicious code in eslint-plugin-module-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afc57b3b316c94a93252629b2c608c1e0dfd28fa51024ff8e2957db8efb8d48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-mark-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3454a8e6853853d2148cad33c350ce65ee8d66082f3b5f9f85c6fa8d2936d6fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10660 Malicious code in eslint-plugin-mark-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3454a8e6853853d2148cad33c350ce65ee8d66082f3b5f9f85c6fa8d2936d6fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...