@eslint/plugin-kit vulnerabilities
We track 1 vulnerability in @eslint/plugin-kit products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 19, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest @eslint/plugin-kit vulnerabilities
- 7.5 High severity
@eslint/plugin-kit: Inefficient Regular Expression Complexity
Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability.