GHSA-jcgq-xh2f-2hfm
MODERATEGitHub ratingA vulnerability was descovered in eslint before 4.18.2. One of the regexes in eslint is vulnerable to catastrophic backtracking.
npm package report
Is eslint safe?
1 known vulnerability, worst severity MODERATE.
// reach
104 direct dependencies
21 carry known advisories, worst CRITICAL
Create a free accountfor every dependency path, dependent and what to upgrade
// ai model usage
Tracked for PyPI packages. HuggingFace models declare Python dependencies, so npm packages are not covered.
cvss
5.0
medium
severity band, no base score published
epss
not scored
chance of exploitation in 30 days
xyz score
not scored
CyberXYZ composite out of 10
fig. 01 — GHSA-jcgq-xh2f-2hfm, the advisory selected below
// 1 advisories
Checked 2026-11-06 at 21:55 UTC. The most recent advisory here was published 2021-02-25. Updated continuously from NVD, GHSA, OSV and CNA feeds.