Description

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code.

Remediation

References

https://github.com/mysticatea/eslint-utils/security/advisories/GHSA-3gx7-xhv7-5mx3

Related Vulnerabilities

CVE-2018-12533 Vulnerability in maven package org.richfaces:richfaces-a4j

CVE-2018-13797 Vulnerability in npm package macaddress

CVE-2017-11429 Vulnerability in npm package saml2-js

CVE-2019-5438 Vulnerability in npm package harp

CVE-2023-45278 Vulnerability in maven package org.yamcs:yamcs-core

Severity

Critical

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory NVD-CWE-noinfo