Description
In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code.
Remediation
References
https://github.com/mysticatea/eslint-utils/security/advisories/GHSA-3gx7-xhv7-5mx3
Related Vulnerabilities
CVE-2019-10797 Vulnerability in maven package org.wso2.transport.http:org.wso2.transport.http.netty
CVE-2012-3451 Vulnerability in maven package org.apache.cxf:cxf-bundle
CVE-2017-18197 Vulnerability in npm package mxgraph
CVE-2018-11798 Vulnerability in maven package org.webjars.bower:thrift
CVE-2020-15171 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore