← All advisories

Critical severity9.8NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2019-15657

CVE-2019-15657

Description

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
eslint-utilsnpm	>= 1.2.0, < 1.4.1	1.4.1

Affected products

3

Eslint Utils Project/Eslint Utils
cpe:2.3:a:eslint-utils_project:eslint-utils:*:*:*:*:*:node.js:*:*
Range: <1.4.1
eslint-utils/eslint-utilsdescription
ghsa-coords
pkg:npm/eslint-utils
Range: >= 1.2.0, < 1.4.1

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-3gx7-xhv7-5mx3ghsaADVISORY
github.com/mysticatea/eslint-utils/security/advisories/GHSA-3gx7-xhv7-5mx3nvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2019-15657ghsaADVISORY
eslint.org/blog/2019/08/eslint-v6.2.1-releasedghsaWEB
github.com/mysticatea/eslint-utils/commit/08158db1c98fd71cf0f32ddefbc147e2620e724cghsaWEB
www.npmjs.com/advisories/1118ghsaWEB

News mentions

0

No linked articles in our index yet.