Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29768
HistoryMar 22, 2021 - 1:23 a.m.

Arbitrary Code Execution

2021-03-2201:23:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.052 Low

EPSS

Percentile

93.0%

eslint-fixer is vulnerable to arbitrary code execution. The vulnerability exists through the lack of sanitization on the input to the child_process.exec() method.

CPENameOperatorVersion
eslint-fixerle0.1.5

0.052 Low

EPSS

Percentile

93.0%