VDB
Sign up

package

npm/@eslint/plugin-kit

pkg:npm/%40eslint/plugin-kit

LOWnpm
GHSA-xffm-g5w8-qvg7

@eslint/plugin-kit is vulnerable to Regular Expression Denial of Service attacks through ConfigCommentParser

Modified: 9/10/2026