NEW @W-23906075@ SF CLI - Automatic ESLint config import leads to RCE during code analyzer process - #501

Merged

nikhil-mittal-165 merged 3 commits into

devfrom

feature/W-eslint-rce-declarative-only

Aug 20, 2026

Commits on Aug 18, 2026

FIX [Bug Bounty/H1] eslint engine: restrict auto-discovery to declarative config to prevent RCE
nikhil-mittal-165
committed
a48f5a8
FIX [Bug Bounty/H1] eslint8 engine: restrict auto-discovery to declarative config to prevent RCE
nikhil-mittal-165
committed
23fbb34
fix(eslint-engine): guard optional eslint_config_file in test scenarios to satisfy ConfigValue type
nikhil-mittal-165
committed
bbe074b