Description
In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code.
Remediation
References
https://github.com/mysticatea/eslint-utils/security/advisories/GHSA-3gx7-xhv7-5mx3
Related Vulnerabilities
CVE-2013-7285 Vulnerability in maven package org.jbehave:jbehave-core
CVE-2020-2181 Vulnerability in maven package org.jenkins-ci.plugins:credentials-binding
CVE-2021-41251 Vulnerability in npm package @sap-cloud-sdk/core
CVE-2021-25912 Vulnerability in npm package dotty
CVE-2022-31129 Vulnerability in maven package org.webjars.bower:momentjs