Skip to main content

Eslint

3 CVEs product

Monthly

CVE-2025-50537 Jan 26, 16:15 MEDIUM POC This Month

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run() method, which validates test cases and checks for duplicates. [CVSS 5.5 MEDIUM]

Stack Overflow Red Hat Eslint Openjsf
NVD GitHub
CVSS 3.1
5.5
EPSS
0.0%
CVE-2021-27081 Mar 11, 16:15 HIGH PATCH This Week

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Eslint
NVD
CVSS 3.1
7.8
EPSS
4.0%
CVE-2020-1481 Jul 14, 23:15 HIGH PATCH This Week

A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Eslint
NVD
CVSS 3.1
8.8
EPSS
23.6%
EPSS 0% CVSS 5.5
MEDIUM POC This Month

Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run() method, which validates test cases and checks for duplicates. [CVSS 5.5 MEDIUM]

Stack Overflow Red Hat Eslint +1
NVD GitHub
EPSS 4% CVSS 7.8
HIGH PATCH This Week

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Eslint
NVD
EPSS 24% CVSS 8.8
HIGH PATCH This Week

A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Eslint
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy