CVE-2021-26275

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

CVE-2021-26275

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

CVE-2021-26275

The CVE-2021-26275 entry concerns the eslint-fixer package for Node.js, up to version 0.1.5. The root cause is command injection via shell metacharacters in the fix() function, enabling arbitrary code execution. Affected software is eslint-fixer (maintained by ozum) with repository reportedly del...

PT-2021-16985 · Unknown · Eslint-Fixer

Name of the Vulnerable Software and Affected Versions: eslint-fixer versions 0.1.5 and earlier Description: The issue allows command injection via shell metacharacters to the fix function. This affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repositor...

CVE-2021-26275: Improper Neutralization of Special Elements used in a Command

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

NPM eslint-fixer 命令注入漏洞

npm eslint-fixer is a development module from the American company npm. It provides promise-based functionality that can be applied to a directory or file given by eslint --fix. A command injection vulnerability exists in eslint-fixer version 0.1.5 and earlier versions, which allows commands to b...

Security Update for Microsoft Visual Studio Code ESLint Extension (March 2021)

Microsoft Visual Studio Code ESLint Extension could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the victim. Note...

Security Update for Microsoft Visual Studio Code ESLint Extension (March 2021)

Microsoft Visual Studio Code Remote Development Extension could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the...

CVE-2021-27081

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability...

CVE-2021-27081

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability...

Remote code execution

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability...

CVE-2021-27081

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability...

CVE-2021-27081 Visual Studio Code ESLint Extension Remote Code Execution Vulnerability

...

CVE-2021-27081

CVE-2021-27081 affects the Visual Studio Code ESLint Extension. The vulnerability could allow remote code execution when a victim opens specially crafted content, enabling an attacker to run arbitrary code with the victim’s privileges. Public exploit activity is noted for this CVE in connected so...

CVE-2021-27081: Undefined Security Weakness

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability...

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability

...

PT-2021-2403 · Microsoft · Visual Studio Code Eslint Extension

Name of the Vulnerable Software and Affected Versions: Visual Studio Code ESLint Extension affected versions not specified Description: The issue is related to a lack of protection for internal data in the Microsoft Visual Studio Code ESLint Extension. Exploitation of this issue may allow an...

GHSA-JCGQ-XH2F-2HFM Regular Expression Denial of Service

A vulnerability was descovered in eslint before 4.18.2. One of the regexes in eslint is vulnerable to catastrophic backtracking...

Regular Expression Denial of Service

A vulnerability was descovered in eslint before 4.18.2. One of the regexes in eslint is vulnerable to catastrophic backtracking...

PT-2021-24434

Name of the Vulnerable Software and Affected Versions: eslint versions prior to 4.18.2 Description: A vulnerability was discovered in eslint, where one of the regexes is vulnerable to catastrophic backtracking. Recommendations: For versions prior to 4.18.2, update to version 4.18.2 or later to...