All the vulnerabilities related to the version 1.3.0 of the package
Arbitrary Code Execution in eslint-utils
Versions of eslint-utils
>=1.2.0 or <1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue
does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant
and getPropertyName
functions are not affected.
Upgrade to version 1.4.1 or later.