CVE-2024-21539
1 advisory.
npm/@eslint/plugin-kit CVE-2024-21539: low 3.5
Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit
Action: Upgrade @eslint/plugin-kit to 0.2.3 or later.
npm i @eslint/plugin-kit@0.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.3 | - |
Fixed versions
| 0.2.3 |
Sources
- osv: GHSA-7q7g-4xm8-89cq
- https://github.com/eslint/rewrite/security/advisories/GHSA-7q7g-4xm8-89cq
- https://nvd.nist.gov/vuln/detail/CVE-2024-21539
- https://github.com/eslint/rewrite/commit/071be842f0bd58de4863cdf2ab86d60f49912abf
- https://github.com/eslint/rewrite
- https://security.snyk.io/vuln/SNYK-JS-ESLINTPLUGINKIT-8340627
CVE-2024-21539 · published · modified · JSON