Description
The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted
Remediation
References
https://advisory.checkmarx.net/advisory/CX-2021-4774
https://www.npmjs.com/package/eslint-fixer
Related Vulnerabilities
CVE-2022-0198 Vulnerability in maven package edu.stanford.nlp:stanford-corenlp
CVE-2022-41250 Vulnerability in maven package com.meowlomo.jenkins:scm-httpclient
CVE-2020-7754 Vulnerability in npm package npm-user-validate
CVE-2022-31179 Vulnerability in npm package shescape
CVE-2020-7758 Vulnerability in npm package browserless-chrome