Description
In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | eslint-utils | >= 1.2.0, < 1.4.1 | 1.4.1 | GHSA-3gx7-xhv7-5mx3 |
Critical · 9.8
CVE-2019-15657
EUVD-2019-0616GHSA-3gx7-xhv7-5mx3
Arbitrary Code Execution in eslint-utils
Published Aug 26, 2019 · Updated Aug 5, 2024 · Assigned by mitre