Vulnerability Details CVE-2025-50537
Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run() method, which validates test cases and checks for duplicates. During validation, the internal function checkDuplicateTestCase() is called, which in turn uses the isSerializable() function for serialization checks. When a circular reference object is passed in, isSerializable() enters infinite recursion, ultimately causing a stack overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.1%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2025-50537
-
cpe:2.3:a:openjsf:eslint:0.0.2
-
cpe:2.3:a:openjsf:eslint:0.0.3-0
-
cpe:2.3:a:openjsf:eslint:0.0.4
-
cpe:2.3:a:openjsf:eslint:0.0.5
-
cpe:2.3:a:openjsf:eslint:0.0.6
-
cpe:2.3:a:openjsf:eslint:0.0.7
-
cpe:2.3:a:openjsf:eslint:0.0.9
-
cpe:2.3:a:openjsf:eslint:0.1.0
-
cpe:2.3:a:openjsf:eslint:0.1.1
-
cpe:2.3:a:openjsf:eslint:0.1.2
-
cpe:2.3:a:openjsf:eslint:0.1.3
-
cpe:2.3:a:openjsf:eslint:0.1.4
-
cpe:2.3:a:openjsf:eslint:0.10.0
-
cpe:2.3:a:openjsf:eslint:0.10.1
-
cpe:2.3:a:openjsf:eslint:0.10.2
-
cpe:2.3:a:openjsf:eslint:0.11.0
-
cpe:2.3:a:openjsf:eslint:0.12.0
-
cpe:2.3:a:openjsf:eslint:0.13.0
-
cpe:2.3:a:openjsf:eslint:0.14.0
-
cpe:2.3:a:openjsf:eslint:0.14.1
-
cpe:2.3:a:openjsf:eslint:0.15.0
-
cpe:2.3:a:openjsf:eslint:0.15.1
-
cpe:2.3:a:openjsf:eslint:0.16.0
-
cpe:2.3:a:openjsf:eslint:0.16.1
-
cpe:2.3:a:openjsf:eslint:0.16.2
-
cpe:2.3:a:openjsf:eslint:0.17.0
-
cpe:2.3:a:openjsf:eslint:0.17.1
-
cpe:2.3:a:openjsf:eslint:0.18.0
-
cpe:2.3:a:openjsf:eslint:0.19.0
-
cpe:2.3:a:openjsf:eslint:0.2.0
-
cpe:2.3:a:openjsf:eslint:0.20.0
-
cpe:2.3:a:openjsf:eslint:0.21.0
-
cpe:2.3:a:openjsf:eslint:0.21.1
-
cpe:2.3:a:openjsf:eslint:0.21.2
-
cpe:2.3:a:openjsf:eslint:0.22.0
-
cpe:2.3:a:openjsf:eslint:0.22.1
-
cpe:2.3:a:openjsf:eslint:0.23.0
-
cpe:2.3:a:openjsf:eslint:0.24.0
-
cpe:2.3:a:openjsf:eslint:0.24.1
-
cpe:2.3:a:openjsf:eslint:0.3.0
-
cpe:2.3:a:openjsf:eslint:0.4.0
-
cpe:2.3:a:openjsf:eslint:0.4.1
-
cpe:2.3:a:openjsf:eslint:0.4.2
-
cpe:2.3:a:openjsf:eslint:0.4.3
-
cpe:2.3:a:openjsf:eslint:0.4.4
-
cpe:2.3:a:openjsf:eslint:0.4.5
-
cpe:2.3:a:openjsf:eslint:0.5.0
-
cpe:2.3:a:openjsf:eslint:0.5.1
-
cpe:2.3:a:openjsf:eslint:0.6.0
-
cpe:2.3:a:openjsf:eslint:0.6.1
-
cpe:2.3:a:openjsf:eslint:0.6.2
-
cpe:2.3:a:openjsf:eslint:0.7.1
-
cpe:2.3:a:openjsf:eslint:0.7.2
-
cpe:2.3:a:openjsf:eslint:0.7.3
-
cpe:2.3:a:openjsf:eslint:0.7.4
-
cpe:2.3:a:openjsf:eslint:0.8.0
-
cpe:2.3:a:openjsf:eslint:0.8.1
-
cpe:2.3:a:openjsf:eslint:0.8.2
-
cpe:2.3:a:openjsf:eslint:0.9.0
-
cpe:2.3:a:openjsf:eslint:0.9.1
-
cpe:2.3:a:openjsf:eslint:0.9.2
-
cpe:2.3:a:openjsf:eslint:1.0.0
-
cpe:2.3:a:openjsf:eslint:1.1.0
-
cpe:2.3:a:openjsf:eslint:1.10.0
-
cpe:2.3:a:openjsf:eslint:1.10.1
-
cpe:2.3:a:openjsf:eslint:1.10.2
-
cpe:2.3:a:openjsf:eslint:1.10.3
-
cpe:2.3:a:openjsf:eslint:1.2.0
-
cpe:2.3:a:openjsf:eslint:1.2.1
-
cpe:2.3:a:openjsf:eslint:1.3.0
-
cpe:2.3:a:openjsf:eslint:1.3.1
-
cpe:2.3:a:openjsf:eslint:1.4.0
-
cpe:2.3:a:openjsf:eslint:1.4.1
-
cpe:2.3:a:openjsf:eslint:1.4.2
-
cpe:2.3:a:openjsf:eslint:1.4.3
-
cpe:2.3:a:openjsf:eslint:1.5.0
-
cpe:2.3:a:openjsf:eslint:1.5.1
-
cpe:2.3:a:openjsf:eslint:1.6.0
-
cpe:2.3:a:openjsf:eslint:1.7.0
-
cpe:2.3:a:openjsf:eslint:1.7.1
-
cpe:2.3:a:openjsf:eslint:1.7.2
-
cpe:2.3:a:openjsf:eslint:1.7.3
-
cpe:2.3:a:openjsf:eslint:1.8.0
-
cpe:2.3:a:openjsf:eslint:1.9.0
-
cpe:2.3:a:openjsf:eslint:2.0.0
-
cpe:2.3:a:openjsf:eslint:2.1.0
-
cpe:2.3:a:openjsf:eslint:2.10.0
-
cpe:2.3:a:openjsf:eslint:2.10.1
-
cpe:2.3:a:openjsf:eslint:2.10.2
-
cpe:2.3:a:openjsf:eslint:2.11.0
-
cpe:2.3:a:openjsf:eslint:2.11.1
-
cpe:2.3:a:openjsf:eslint:2.12.0
-
cpe:2.3:a:openjsf:eslint:2.13.0
-
cpe:2.3:a:openjsf:eslint:2.13.1
-
cpe:2.3:a:openjsf:eslint:2.2.0
-
cpe:2.3:a:openjsf:eslint:2.3.0
-
cpe:2.3:a:openjsf:eslint:2.4.0
-
cpe:2.3:a:openjsf:eslint:2.5.0
-
cpe:2.3:a:openjsf:eslint:2.5.1
-
cpe:2.3:a:openjsf:eslint:2.5.2
-
cpe:2.3:a:openjsf:eslint:2.5.3
-
cpe:2.3:a:openjsf:eslint:2.6.0
-
cpe:2.3:a:openjsf:eslint:2.7.0
-
cpe:2.3:a:openjsf:eslint:2.8.0
-
cpe:2.3:a:openjsf:eslint:2.9.0
-
cpe:2.3:a:openjsf:eslint:3.0.0
-
cpe:2.3:a:openjsf:eslint:3.0.1
-
cpe:2.3:a:openjsf:eslint:3.1.0
-
cpe:2.3:a:openjsf:eslint:3.1.1
-
cpe:2.3:a:openjsf:eslint:3.10.0
-
cpe:2.3:a:openjsf:eslint:3.10.1
-
cpe:2.3:a:openjsf:eslint:3.10.2
-
cpe:2.3:a:openjsf:eslint:3.11.0
-
cpe:2.3:a:openjsf:eslint:3.11.1
-
cpe:2.3:a:openjsf:eslint:3.12.0
-
cpe:2.3:a:openjsf:eslint:3.12.1
-
cpe:2.3:a:openjsf:eslint:3.12.2
-
cpe:2.3:a:openjsf:eslint:3.13.0
-
cpe:2.3:a:openjsf:eslint:3.13.1
-
cpe:2.3:a:openjsf:eslint:3.14.0
-
cpe:2.3:a:openjsf:eslint:3.14.1
-
cpe:2.3:a:openjsf:eslint:3.15.0
-
cpe:2.3:a:openjsf:eslint:3.16.0
-
cpe:2.3:a:openjsf:eslint:3.16.1
-
cpe:2.3:a:openjsf:eslint:3.17.0
-
cpe:2.3:a:openjsf:eslint:3.17.1
-
cpe:2.3:a:openjsf:eslint:3.18.0
-
cpe:2.3:a:openjsf:eslint:3.19.0
-
cpe:2.3:a:openjsf:eslint:3.2.0
-
cpe:2.3:a:openjsf:eslint:3.2.1
-
cpe:2.3:a:openjsf:eslint:3.2.2
-
cpe:2.3:a:openjsf:eslint:3.3.0
-
cpe:2.3:a:openjsf:eslint:3.3.1
-
cpe:2.3:a:openjsf:eslint:3.4.0
-
cpe:2.3:a:openjsf:eslint:3.5.0
-
cpe:2.3:a:openjsf:eslint:3.6.0
-
cpe:2.3:a:openjsf:eslint:3.6.1
-
cpe:2.3:a:openjsf:eslint:3.7.0
-
cpe:2.3:a:openjsf:eslint:3.7.1
-
cpe:2.3:a:openjsf:eslint:3.8.0
-
cpe:2.3:a:openjsf:eslint:3.8.1
-
cpe:2.3:a:openjsf:eslint:3.9.0
-
cpe:2.3:a:openjsf:eslint:3.9.1
-
cpe:2.3:a:openjsf:eslint:4.0.0
-
cpe:2.3:a:openjsf:eslint:4.1.0
-
cpe:2.3:a:openjsf:eslint:4.1.1
-
cpe:2.3:a:openjsf:eslint:4.10.0
-
cpe:2.3:a:openjsf:eslint:4.11.0
-
cpe:2.3:a:openjsf:eslint:4.12.0
-
cpe:2.3:a:openjsf:eslint:4.12.1
-
cpe:2.3:a:openjsf:eslint:4.13.0
-
cpe:2.3:a:openjsf:eslint:4.13.1
-
cpe:2.3:a:openjsf:eslint:4.14.0
-
cpe:2.3:a:openjsf:eslint:4.15.0
-
cpe:2.3:a:openjsf:eslint:4.16.0
-
cpe:2.3:a:openjsf:eslint:4.17.0
-
cpe:2.3:a:openjsf:eslint:4.18.0
-
cpe:2.3:a:openjsf:eslint:4.18.1
-
cpe:2.3:a:openjsf:eslint:4.18.2
-
cpe:2.3:a:openjsf:eslint:4.19.0
-
cpe:2.3:a:openjsf:eslint:4.19.1
-
cpe:2.3:a:openjsf:eslint:4.2.0
-
cpe:2.3:a:openjsf:eslint:4.3.0
-
cpe:2.3:a:openjsf:eslint:4.4.0
-
cpe:2.3:a:openjsf:eslint:4.4.1
-
cpe:2.3:a:openjsf:eslint:4.5.0
-
cpe:2.3:a:openjsf:eslint:4.6.0
-
cpe:2.3:a:openjsf:eslint:4.6.1
-
cpe:2.3:a:openjsf:eslint:4.7.0
-
cpe:2.3:a:openjsf:eslint:4.7.1
-
cpe:2.3:a:openjsf:eslint:4.7.2
-
cpe:2.3:a:openjsf:eslint:4.8.0
-
cpe:2.3:a:openjsf:eslint:4.9.0
-
cpe:2.3:a:openjsf:eslint:5.0.0
-
cpe:2.3:a:openjsf:eslint:5.0.1
-
cpe:2.3:a:openjsf:eslint:5.1.0
-
cpe:2.3:a:openjsf:eslint:5.10.0
-
cpe:2.3:a:openjsf:eslint:5.11.0
-
cpe:2.3:a:openjsf:eslint:5.11.1
-
cpe:2.3:a:openjsf:eslint:5.12.0
-
cpe:2.3:a:openjsf:eslint:5.12.1
-
cpe:2.3:a:openjsf:eslint:5.13.0
-
cpe:2.3:a:openjsf:eslint:5.14.0
-
cpe:2.3:a:openjsf:eslint:5.14.1
-
cpe:2.3:a:openjsf:eslint:5.15.0
-
cpe:2.3:a:openjsf:eslint:5.15.1
-
cpe:2.3:a:openjsf:eslint:5.15.2
-
cpe:2.3:a:openjsf:eslint:5.15.3
-
cpe:2.3:a:openjsf:eslint:5.16.0
-
cpe:2.3:a:openjsf:eslint:5.2.0
-
cpe:2.3:a:openjsf:eslint:5.3.0
-
cpe:2.3:a:openjsf:eslint:5.4.0
-
cpe:2.3:a:openjsf:eslint:5.5.0
-
cpe:2.3:a:openjsf:eslint:5.6.0
-
cpe:2.3:a:openjsf:eslint:5.6.1
-
cpe:2.3:a:openjsf:eslint:5.7.0
-
cpe:2.3:a:openjsf:eslint:5.8.0
-
cpe:2.3:a:openjsf:eslint:5.9.0
-
cpe:2.3:a:openjsf:eslint:6.0.0
-
cpe:2.3:a:openjsf:eslint:6.0.1
-
cpe:2.3:a:openjsf:eslint:6.1.0
-
cpe:2.3:a:openjsf:eslint:6.2.0
-
cpe:2.3:a:openjsf:eslint:6.2.1
-
cpe:2.3:a:openjsf:eslint:6.2.2
-
cpe:2.3:a:openjsf:eslint:6.3.0
-
cpe:2.3:a:openjsf:eslint:6.4.0
-
cpe:2.3:a:openjsf:eslint:6.5.0
-
cpe:2.3:a:openjsf:eslint:6.5.1
-
cpe:2.3:a:openjsf:eslint:6.6.0
-
cpe:2.3:a:openjsf:eslint:6.7.0
-
cpe:2.3:a:openjsf:eslint:6.7.1
-
cpe:2.3:a:openjsf:eslint:6.7.2
-
cpe:2.3:a:openjsf:eslint:6.8.0
-
cpe:2.3:a:openjsf:eslint:7.0.0
-
cpe:2.3:a:openjsf:eslint:7.1.0
-
cpe:2.3:a:openjsf:eslint:7.10.0
-
cpe:2.3:a:openjsf:eslint:7.11.0
-
cpe:2.3:a:openjsf:eslint:7.12.0
-
cpe:2.3:a:openjsf:eslint:7.12.1
-
cpe:2.3:a:openjsf:eslint:7.13.0
-
cpe:2.3:a:openjsf:eslint:7.14.0
-
cpe:2.3:a:openjsf:eslint:7.15.0
-
cpe:2.3:a:openjsf:eslint:7.16.0
-
cpe:2.3:a:openjsf:eslint:7.17.0
-
cpe:2.3:a:openjsf:eslint:7.18.0
-
cpe:2.3:a:openjsf:eslint:7.19.0
-
cpe:2.3:a:openjsf:eslint:7.2.0
-
cpe:2.3:a:openjsf:eslint:7.20.0
-
cpe:2.3:a:openjsf:eslint:7.21.0
-
cpe:2.3:a:openjsf:eslint:7.22.0
-
cpe:2.3:a:openjsf:eslint:7.23.0
-
cpe:2.3:a:openjsf:eslint:7.24.0
-
cpe:2.3:a:openjsf:eslint:7.25.0
-
cpe:2.3:a:openjsf:eslint:7.26.0
-
cpe:2.3:a:openjsf:eslint:7.27.0
-
cpe:2.3:a:openjsf:eslint:7.28.0
-
cpe:2.3:a:openjsf:eslint:7.29.0
-
cpe:2.3:a:openjsf:eslint:7.3.0
-
cpe:2.3:a:openjsf:eslint:7.3.1
-
cpe:2.3:a:openjsf:eslint:7.30.0
-
cpe:2.3:a:openjsf:eslint:7.31.0
-
cpe:2.3:a:openjsf:eslint:7.32.0
-
cpe:2.3:a:openjsf:eslint:7.4.0
-
cpe:2.3:a:openjsf:eslint:7.5.0
-
cpe:2.3:a:openjsf:eslint:7.6.0
-
cpe:2.3:a:openjsf:eslint:7.7.0
-
cpe:2.3:a:openjsf:eslint:7.8.0
-
cpe:2.3:a:openjsf:eslint:7.8.1
-
cpe:2.3:a:openjsf:eslint:7.9.0
-
cpe:2.3:a:openjsf:eslint:8.0.0
-
cpe:2.3:a:openjsf:eslint:8.0.1
-
cpe:2.3:a:openjsf:eslint:8.1.0
-
cpe:2.3:a:openjsf:eslint:8.10.0
-
cpe:2.3:a:openjsf:eslint:8.11.0
-
cpe:2.3:a:openjsf:eslint:8.12.0
-
cpe:2.3:a:openjsf:eslint:8.13.0
-
cpe:2.3:a:openjsf:eslint:8.14.0
-
cpe:2.3:a:openjsf:eslint:8.15.0
-
cpe:2.3:a:openjsf:eslint:8.16.0
-
cpe:2.3:a:openjsf:eslint:8.17.0
-
cpe:2.3:a:openjsf:eslint:8.18.0
-
cpe:2.3:a:openjsf:eslint:8.19.0
-
cpe:2.3:a:openjsf:eslint:8.2.0
-
cpe:2.3:a:openjsf:eslint:8.20.0
-
cpe:2.3:a:openjsf:eslint:8.21.0
-
cpe:2.3:a:openjsf:eslint:8.22.0
-
cpe:2.3:a:openjsf:eslint:8.23.0
-
cpe:2.3:a:openjsf:eslint:8.23.1
-
cpe:2.3:a:openjsf:eslint:8.24.0
-
cpe:2.3:a:openjsf:eslint:8.25.0
-
cpe:2.3:a:openjsf:eslint:8.26.0
-
cpe:2.3:a:openjsf:eslint:8.27.0
-
cpe:2.3:a:openjsf:eslint:8.28.0
-
cpe:2.3:a:openjsf:eslint:8.29.0
-
cpe:2.3:a:openjsf:eslint:8.3.0
-
cpe:2.3:a:openjsf:eslint:8.30.0
-
cpe:2.3:a:openjsf:eslint:8.31.0
-
cpe:2.3:a:openjsf:eslint:8.32.0
-
cpe:2.3:a:openjsf:eslint:8.33.0
-
cpe:2.3:a:openjsf:eslint:8.34.0
-
cpe:2.3:a:openjsf:eslint:8.35.0
-
cpe:2.3:a:openjsf:eslint:8.36.0
-
cpe:2.3:a:openjsf:eslint:8.37.0
-
cpe:2.3:a:openjsf:eslint:8.38.0
-
cpe:2.3:a:openjsf:eslint:8.39.0
-
cpe:2.3:a:openjsf:eslint:8.4.0
-
cpe:2.3:a:openjsf:eslint:8.4.1
-
cpe:2.3:a:openjsf:eslint:8.40.0
-
cpe:2.3:a:openjsf:eslint:8.41.0
-
cpe:2.3:a:openjsf:eslint:8.42.0
-
cpe:2.3:a:openjsf:eslint:8.43.0
-
cpe:2.3:a:openjsf:eslint:8.44.0
-
cpe:2.3:a:openjsf:eslint:8.45.0
-
cpe:2.3:a:openjsf:eslint:8.46.0
-
cpe:2.3:a:openjsf:eslint:8.47.0
-
cpe:2.3:a:openjsf:eslint:8.48.0
-
cpe:2.3:a:openjsf:eslint:8.49.0
-
cpe:2.3:a:openjsf:eslint:8.5.0
-
cpe:2.3:a:openjsf:eslint:8.50.0
-
cpe:2.3:a:openjsf:eslint:8.51.0
-
cpe:2.3:a:openjsf:eslint:8.52.0
-
cpe:2.3:a:openjsf:eslint:8.53.0
-
cpe:2.3:a:openjsf:eslint:8.54.0
-
cpe:2.3:a:openjsf:eslint:8.55.0
-
cpe:2.3:a:openjsf:eslint:8.56.0
-
cpe:2.3:a:openjsf:eslint:8.57.0
-
cpe:2.3:a:openjsf:eslint:8.57.1
-
cpe:2.3:a:openjsf:eslint:8.6.0
-
cpe:2.3:a:openjsf:eslint:8.7.0
-
cpe:2.3:a:openjsf:eslint:8.8.0
-
cpe:2.3:a:openjsf:eslint:8.9.0
-
cpe:2.3:a:openjsf:eslint:9.0.0
-
cpe:2.3:a:openjsf:eslint:9.1.0
-
cpe:2.3:a:openjsf:eslint:9.1.1
-
cpe:2.3:a:openjsf:eslint:9.10.0
-
cpe:2.3:a:openjsf:eslint:9.11.0
-
cpe:2.3:a:openjsf:eslint:9.11.1
-
cpe:2.3:a:openjsf:eslint:9.12.0
-
cpe:2.3:a:openjsf:eslint:9.13.0
-
cpe:2.3:a:openjsf:eslint:9.14.0
-
cpe:2.3:a:openjsf:eslint:9.15.0
-
cpe:2.3:a:openjsf:eslint:9.16.0
-
cpe:2.3:a:openjsf:eslint:9.17.0
-
cpe:2.3:a:openjsf:eslint:9.18.0
-
cpe:2.3:a:openjsf:eslint:9.19.0
-
cpe:2.3:a:openjsf:eslint:9.2.0
-
cpe:2.3:a:openjsf:eslint:9.20.0
-
cpe:2.3:a:openjsf:eslint:9.20.1
-
cpe:2.3:a:openjsf:eslint:9.21.0
-
cpe:2.3:a:openjsf:eslint:9.22.0
-
cpe:2.3:a:openjsf:eslint:9.23.0
-
cpe:2.3:a:openjsf:eslint:9.24.0
-
cpe:2.3:a:openjsf:eslint:9.25.0
-
cpe:2.3:a:openjsf:eslint:9.25.1
-
cpe:2.3:a:openjsf:eslint:9.3.0
-
cpe:2.3:a:openjsf:eslint:9.4.0
-
cpe:2.3:a:openjsf:eslint:9.5.0
-
cpe:2.3:a:openjsf:eslint:9.6.0
-
cpe:2.3:a:openjsf:eslint:9.7.0
-
cpe:2.3:a:openjsf:eslint:9.8.0
-
cpe:2.3:a:openjsf:eslint:9.9.0
-
cpe:2.3:a:openjsf:eslint:9.9.1