Description
The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted
Remediation
References
https://advisory.checkmarx.net/advisory/CX-2021-4774
https://www.npmjs.com/package/eslint-fixer
Related Vulnerabilities
CVE-2020-9447 Vulnerability in maven package com.googlecode.gwtupload:gwtupload-samples
CVE-2022-23505 Vulnerability in npm package passport-wsfed-saml2
CVE-2023-40812 Vulnerability in maven package org.opencrx:opencrx-core-models
CVE-2023-31580 Vulnerability in maven package com.networknt:light-oauth2
CVE-2023-34620 Vulnerability in maven package org.hjson:hjson