6 matches found
eslint-utils Arbitrary Code Execution Vulnerability
eslint-utils is a utility for ESLint plugins and custom rules. An arbitrary code execution vulnerability exists in versions of eslint-utils prior to 1.4.1. An attacker can exploit this vulnerability to execute arbitrary code via the getStaticValue function...
CVE-2019-15657
In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...
Code injection
In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...
CVE-2019-15657
In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...
GHSA-3GX7-XHV7-5MX3 Arbitrary Code Execution in eslint-utils
Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName functions...
