Stack Overflow Vulnerability in ESLint Affects Code Analysis Tool

CVE-2025-50537

What is CVE-2025-50537?

A stack overflow vulnerability occurs in ESLint prior to version 9.26.0, specifically during the serialization of objects containing circular references. The vulnerability arises through the RuleTester.run() method that is responsible for validating test cases. While checking for duplicates, the internal function checkDuplicateTestCase() invokes the isSerializable() function. When this function encounters an object with circular references, it triggers infinite recursion, leading to a stack overflow. This flaw can be exploited by malicious actors to disrupt the functionality of the code analysis tool, posing significant risks to applications reliant on ESLint for code quality and security.

References