The vulnerability of the Microsoft Visual Studio Code ESLint Extension lies in the lack of protection for service data, allowing a malicious actor to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio Code ESLint Extension lies in the lack of protection for service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Arbitrary Code Execution

eslint-fixer is vulnerable to arbitrary code execution. The vulnerability exists through the lack of sanitization on the input to the childprocess.exec method...

CVE-2021-26275

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

CVE-2021-26275

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

CVE-2021-26275

The CVE-2021-26275 entry concerns the eslint-fixer package for Node.js, up to version 0.1.5. The root cause is command injection via shell metacharacters in the fix() function, enabling arbitrary code execution. Affected software is eslint-fixer (maintained by ozum) with repository reportedly del...

NPM eslint-fixer 命令注入漏洞

npm eslint-fixer is a development module from the American company npm. It provides promise-based functionality that can be applied to a directory or file given by eslint --fix. A command injection vulnerability exists in eslint-fixer version 0.1.5 and earlier versions, which allows commands to b...

PT-2021-16985 · Unknown · Eslint-Fixer

Name of the Vulnerable Software and Affected Versions: eslint-fixer versions 0.1.5 and earlier Description: The issue allows command injection via shell metacharacters to the fix function. This affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repositor...

Security Update for Microsoft Visual Studio Code ESLint Extension (March 2021)

Microsoft Visual Studio Code ESLint Extension could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the victim. Note...

Security Update for Microsoft Visual Studio Code ESLint Extension (March 2021)

Microsoft Visual Studio Code Remote Development Extension could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the...

CVE-2021-27081

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability...

CVE-2021-27081

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability...

CVE-2021-27081

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability...

CVE-2021-27081 Visual Studio Code ESLint Extension Remote Code Execution Vulnerability

...

CVE-2021-27081

CVE-2021-27081 affects the Visual Studio Code ESLint Extension. The vulnerability could allow remote code execution when a victim opens specially crafted content, enabling an attacker to run arbitrary code with the victim’s privileges. Public exploit activity is noted for this CVE in connected so...

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability

...

PT-2021-2403 · Microsoft · Visual Studio Code Eslint Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code ESLint Extension affected versions not specified Description: The issue is related to a lack of protection for internal data in the Microsoft Visual Studio Code ESLint Extension. Exploitation of this issue may allow an...

Regular Expression Denial of Service

A vulnerability was descovered in eslint before 4.18.2. One of the regexes in eslint is vulnerable to catastrophic backtracking...

GHSA-JCGQ-XH2F-2HFM Regular Expression Denial of Service

A vulnerability was descovered in eslint before 4.18.2. One of the regexes in eslint is vulnerable to catastrophic backtracking...

@glossgenius/eslint-config (>=1.0.2, <=1.0.7), @halonext/nestjs-express-cassandra (>=7.0.0, <=7.1.0) +7 more potentially affected by CVE-2021-26707 via merge-deep (>=3.0.0, <=3.0.2)

merge-deep NPM version =3.0.0, =1.0.2, =7.0.0, =5.2.0, =6.0.1, =0.0.1, =0.1.0-rc0, =0.0.11, =1.0.0, =1.2.4 Source cves: CVE-2021-26707 Source advisory: SNYK:JS-MERGEDEEP-1070277...