search

adametry / gulp-eslint

A Gulp plugin for identifying and reporting on patterns found in ECMAScript/JavaScript code.
MIT License
563 stars 118 forks source link

eslint / eslint-utils security issues on v6.0.0 #242

Open benjclark opened 5 years ago

benjclark commented 5 years ago

Hi

Just wondered if you will be releasing a new patch version any time soon that uses eslint v6.4.0 instead of 6.0.0?

The older version is causing GitHub's to broadcast critical security warnings for anything consuming 6.0.0.

If interested the security issue is 'getStaticValue' function can execute arbitrary code