CVE-2021-26275: Eslint-Fixer Project Eslint-Fixer

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted

Affected products

• Eslint-Fixer Project Eslint-Fixer: up to and including 0.1.5

Published 2021-03-19. Last modified 2026-06-17.