npm/@eslint/plugin-kit: low
@eslint/plugin-kit is vulnerable to Regular Expression Denial of Service attacks through ConfigCommentParser
Action: Upgrade @eslint/plugin-kit to 0.3.4 or later.
npm i @eslint/plugin-kit@0.3.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.4 | - |
Fixed versions
| 0.3.4 |
Sources
- osv: GHSA-xffm-g5w8-qvg7
- https://github.com/eslint/rewrite/security/advisories/GHSA-xffm-g5w8-qvg7
- https://github.com/eslint/rewrite/commit/b283f64099ad6c6b5043387c091691d21b387805
- https://github.com/eslint/rewrite
published · modified · JSON