Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Mysticatea

#25597of 56,326
9.8Total CVSS
Vulnerabilities · 1
PT-2019-14325
9.8
2019-08-26
Eslint · Eslint-Utils · CVE-2019-15657
**Name of the Vulnerable Software and Affected Versions** eslint-utils versions 1.2.0 through 1.4.0 **Description** The issue concerns the execution of arbitrary code due to improper sanitization of user input by the `getStaticValue` function. This allows attackers to supply malicious input that executes arbitrary code during the linting process. The `getStringIfConstant` and `getPropertyName` functions are not affected. **Recommendations** Upgrade to version 1.4.1 or later.