Description

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code.

Remediation

References

https://github.com/mysticatea/eslint-utils/security/advisories/GHSA-3gx7-xhv7-5mx3

Related Vulnerabilities

CVE-2022-36437 Vulnerability in maven package com.hazelcast:hazelcast

CVE-2022-36884 Vulnerability in maven package org.jenkins-ci.plugins:git

CVE-2018-11011 Vulnerability in maven package cc.ryanc:halo

CVE-2021-46089 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base-core

CVE-2023-5572 Vulnerability in npm package @vrite/sdk

Severity

Critical

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory NVD-CWE-noinfo