Skip to content

[GHSA-p5wg-g6qr-c7cg] eslint has a Stack Overflow when serializing objects with circular references#6758

Merged
advisory-database[bot] merged 1 commit intomainfrom
lukemcgregor-GHSA-p5wg-g6qr-c7cg
Feb 3, 2026
Merged

[GHSA-p5wg-g6qr-c7cg] eslint has a Stack Overflow when serializing objects with circular references#6758
advisory-database[bot] merged 1 commit intomainfrom
lukemcgregor-GHSA-p5wg-g6qr-c7cg

Conversation

@lukemcgregor
Copy link
Copy Markdown
Contributor

Updates

  • CWEs
  • Summary

Comments
A possible stack overflow in eslint shouldn't be a security vulnerability. Eslint is running on trusted or semi trusted input, if it fails in this manor its not going to cause service outages, data leakages or remote access. By allowing 'security issues' like this into the database you are undermining trust in the database as a whole.

This should be getting reoported on eslint issues on their repo, not in the vulnerability db

Copilot AI review requested due to automatic review settings February 2, 2026 20:18
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR modifies a GitHub Security Advisory (GHSA) to reclassify an ESLint stack overflow issue as not being a security vulnerability. The change reflects the position that stack overflow issues in developer tools like ESLint, which run on trusted input, should not be treated as security vulnerabilities.

Changes:

  • Updated the advisory summary from describing a specific vulnerability to "Not a vulnerability"
  • Removed the CWE-674 classification (Uncontrolled Recursion)
  • Updated the modification timestamp

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@advisory-database advisory-database Bot merged commit 1895618 into main Feb 3, 2026
1 of 3 checks passed
@advisory-database
Copy link
Copy Markdown
Contributor

Hi @lukemcgregor! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

@advisory-database advisory-database Bot deleted the lukemcgregor-GHSA-p5wg-g6qr-c7cg branch February 3, 2026 17:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants