{"action":"Upgrade eslint-utils to 1.4.1 or later.","affected":[{"fixed":"1.4.1","introduced":"1.2.0"}],"component":"eslint-utils","cve_ids":["CVE-2019-15657"],"ecosystem":"npm","epss":0.02269,"exploited":false,"fixed_versions":["1.4.1"],"ghsa_id":"GHSA-3gx7-xhv7-5mx3","id":"tcs_01M5KEXBQ06SNGGWMMKYDEHBH2","modified_at":"2026-09-10T03:48:25.144691813Z","published_at":"2019-08-26T16:59:56Z","references":["https://osv.dev/vulnerability/GHSA-3gx7-xhv7-5mx3","https://github.com/mysticatea/eslint-utils/security/advisories/GHSA-3gx7-xhv7-5mx3","https://nvd.nist.gov/vuln/detail/CVE-2019-15657","https://github.com/mysticatea/eslint-utils/commit/08158db1c98fd71cf0f32ddefbc147e2620e724c","https://eslint.org/blog/2019/08/eslint-v6.2.1-released","https://github.com/advisories/GHSA-3gx7-xhv7-5mx3","https://github.com/mysticatea/eslint-utils","https://www.npmjs.com/advisories/1118"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-3gx7-xhv7-5mx3","url":"https://osv.dev/vulnerability/GHSA-3gx7-xhv7-5mx3"}],"summary":"Arbitrary Code Execution in eslint-utils"}