CVE-2020-1481

A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'...

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on...

CVE-2020-1481: Undefined Security Weakness

A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'...

PT-2020-3300 · Microsoft · Visual Studio Code Eslint Extension

Name of the Vulnerable Software and Affected Versions: ESLint extension for Visual Studio Code affected versions not specified Description: A remote code execution issue exists in the ESLint extension for Visual Studio Code. This occurs when the extension validates source code after a project is...

KLA11859 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Windows Diagnostics Hub...

compare-eslint-config (>=0.1.0, <=0.1.1) potentially affected by CVE-2020-7629 via install-package (0.1.0)

install-package NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on install-package and may be impacted: - compare-eslint-config =0.1.0, =0.1.1 Source cves: CVE-2020-7629 Source advisory: SNYK:JS-INSTALLPACKAGE-564267...

Withdrawn: ESLint dependencies are vulnerable (ReDoS and Prototype Pollution)

Withdrawn GitHub has withdrawn this advisory in place of GHSA-vh95-rmgr-6w4m and GHSA-6chw-6frg-f759. The reason for withdrawing is that some mistakes were made during the ingestion of CVE-2020-7598 which caused this advisory to be published with incorrect information. In order to provide accurat...

GHSA-7FHM-MQM4-2WP7 Withdrawn: ESLint dependencies are vulnerable (ReDoS and Prototype Pollution)

Withdrawn GitHub has withdrawn this advisory in place of GHSA-vh95-rmgr-6w4m and GHSA-6chw-6frg-f759. The reason for withdrawing is that some mistakes were made during the ingestion of CVE-2020-7598 which caused this advisory to be published with incorrect information. In order to provide accurat...

eslint-utils Arbitrary Code Execution Vulnerability

eslint-utils is a utility for ESLint plugins and custom rules. An arbitrary code execution vulnerability exists in versions of eslint-utils prior to 1.4.1. An attacker can exploit this vulnerability to execute arbitrary code via the getStaticValue function...

CVE-2019-15657

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...

Code injection

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...

CVE-2019-15657

CVE-2019-15657 affects eslint-utils prior to 1.4.1. The getStaticValue function can execute arbitrary code, enabling potential code execution when linting. The issue is present in versions before 1.4.1; upgrading to 1.4.1 or later is recommended as the remediation. The connected documents corrobo...

CVE-2019-15657

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...

CVE-2019-15657

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...

Arbitrary Code Execution in eslint-utils

Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName functions...

GHSA-3GX7-XHV7-5MX3 Arbitrary Code Execution in eslint-utils

Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName functions...

PT-2019-14325

Name of the Vulnerable Software and Affected Versions eslint-utils versions 1.2.0 through 1.4.0 Description The issue concerns the execution of arbitrary code due to improper sanitization of user input by the getStaticValue function. This allows attackers to supply malicious input that executes...

CVE-2019-15657: Undefined Security Weakness

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...

Arbitrary Code Execution

eslint-utils is vulnerable to arbitrary code execution. A lack of validation results in a prototype pollution vulnerability in the getStaticValue function which would allow an attacker to execute arbitrary code...

Arbitrary Code Execution

Overview Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName...