eslint rewrite vulnerabilities

Latest eslint rewrite CVEs

Newest publication first

1. CVE-2024-21539 Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit

   Published 2024-11-19

   High·CVSS 8.7 EPSS 0.51%

   Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.