GCVE - cpe:2.3:a:eslint-fixer_project:eslint-fixer:*:*:*:*:*:node.js:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:eslint-fixer_project:eslint-fixer:*:*:*:*:*:node.js:*:*

part: a version: * update: *

Vendor	Eslint Fixer Project (`98f11145-797d-5dcf-b7f5-0a72a7e66d26`)
Product	Eslint Fixer (`9bdfbcc2-1389-5247-a931-d7f3318f9114`)
Edition	*
Language	*
Software edition	*
Target software	node.js
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-26275`	vulnerable	2026-06-08 05:30:42.152862	Details available The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted Published: 2021-03-18T23:34:13.000Z Updated: 2024-08-03T20:19:20.176Z Open on db.gcve.eu Reference links https://www.npmjs.com/package/eslint-fixer https://advisory.checkmarx.net/advisory/CX-2021-4774	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.