Skip to content
OpenAdvisories

Package · npm

@eslint/plugin-kit

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-xffm-g5w8-qvg7

    @eslint/plugin-kit is vulnerable to Regular Expression Denial of Service attacks through ConfigCommentParser

    ### Summary The `ConfigCommentParser#parseJSONLikeConfig` API is vulnerable to a Regular Expression Denial of Service (ReDoS) attack in its only argument. ### Details The regular expression at [packages/plugin-kit/src/config-comment-parser.js:158](https://git…

    @eslint/plugin-kit npm