2 matches found
eslint-utils Arbitrary Code Execution Vulnerability
eslint-utils is a utility for ESLint plugins and custom rules. An arbitrary code execution vulnerability exists in versions of eslint-utils prior to 1.4.1. An attacker can exploit this vulnerability to execute arbitrary code via the getStaticValue function...
CVE-2019-15657
In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...