Stack Overflow Vulnerability in ESLint Affects Code Analysis Tool

CVE-2025-50537

What is CVE-2025-50537?

A stack overflow vulnerability occurs in ESLint prior to version 9.26.0, specifically during the serialization of objects containing circular references. The vulnerability arises through the RuleTester.run() method that is responsible for validating test cases. While checking for duplicates, the internal function checkDuplicateTestCase() invokes the isSerializable() function. When this function encounters an object with circular references, it triggers infinite recursion, leading to a stack overflow. This flaw can be exploited by malicious actors to disrupt the functionality of the code analysis tool, posing significant risks to applications reliant on ESLint for code quality and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References