Malicious code in eslint-config-minecraft-scripting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965724c03399dbf45fac622dbfa8cb38e94e6cf7e3c137390da6e2818b9f073b The package eslint-config-minecraft-scripting was found to contain malicious code. Source: ghsa-malware...

MAL-2026-634 Malicious code in eslint-config-minecraft-scripting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965724c03399dbf45fac622dbfa8cb38e94e6cf7e3c137390da6e2818b9f073b The package eslint-config-minecraft-scripting was found to contain malicious code. Source: ghsa-malware...

MAL-2026-522 Malicious code in magento-coding-standard-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181566f148b6cac8ad613b2942849254b7a6968bbe5e16a9d009aaa8e4184b25 The package magento-coding-standard-eslint-plugin was found to contain malicious code. Source: ghsa-malware...

GHSA-P5WG-G6QR-C7CG Withdrawn Advisory: eslint has a Stack Overflow when serializing objects with circular references

Withdrawn Advisory This advisory has been withdrawn because RuleTester is used for testing rules during development and results in a error rather than crashing the application. Original Description There is a Stack Overflow vulnerability in eslint before 9.26.0 when serializing objects with...

Withdrawn Advisory: eslint has a Stack Overflow when serializing objects with circular references

Withdrawn Advisory This advisory has been withdrawn because RuleTester is used for testing rules during development and results in a error rather than crashing the application. Original Description There is a Stack Overflow vulnerability in eslint before 9.26.0 when serializing objects with...

@0x57/pierre (>=0.0.3 <=0.0.16), @0xshogun/sdk (>=1.1.44 <=1.1.52) +380 more potentially affected by CVE-2025-50537 via eslint (>=9.0.0-rc.0 <=9.25.1)

eslint NPM version =9.0.0-rc.0, =0.0.3, =1.1.44, =1.1.14, =0.0.1-alpha.3, =2.6.0, =2.2.9, =0.0.2, =0.0.0-dev-20250424035410, =1.0.68, =0.0.4, =0.0.66, =0.0.3, =1.0.0, =1.0.0, =1.0.2 and more Source cves: CVE-2025-50537 Source advisory: SNYK:JS-ESLINT-15102420...

Uncontrolled Recursion

Overview eslint is a pluggable linting utility for JavaScript and JSX Affected versions of this package are vulnerable to Uncontrolled Recursion in the isSerializable function when handling objects with circular references during the serialization process. An attacker can cause the application to...

Uncontrolled Recursion

Overview org.webjars.npm:eslint is a pluggable linting utility for JavaScript and JSX Affected versions of this package are vulnerable to Uncontrolled Recursion in the isSerializable function when handling objects with circular references during the serialization process. An attacker can cause th...

CVE-2025-50537

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

CVE-2025-50537

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

UBUNTU-CVE-2025-50537

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

CVE-2025-50537

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

CVE-2025-50537

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

EUVD-2025-206359

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

CVE-2025-50537

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

ESLint security vulnerabilities

ESLint is an open-source tool developed by ESLint that identifies and fixes issues in JavaScript code. Versions of ESLint prior to 9.26.0 contained a security vulnerability. This vulnerability stemmed from infinite recursion when serializing objects with circular references, which could lead to a...

CVE-2025-50537

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run method, which validates test cases and checks for duplicates. During validation, the internal function...

CVE-2025-50537

Removed by vendor...

Linux Distros Unpatched Vulnerability : CVE-2025-50537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is...

CVE-2025-50537

CVE-2025-50537 : The vulnerability affects eslint before 9.26.0, where serializing objects with circular references in eslint/lib/shared/serialization.js triggers infinite recursion in isSerializable() during RuleTester.run() validation, causing a stack overflow. Multiple sources (NVD, OSV, and C...