Issues

• Rule Change: detect-non-literal-fs-filename should treat os.tmpdir() and mkdtemp results as static

  eslint-community/eslint-plugin-security#227 · Filter by author oconnorjoseph opened on Sep 30, 2026

• Rule Change: support RegExp.escape

  enhancement
  Feature

  eslint-community/eslint-plugin-security#201 · Filter by author Simbiat opened on Jun 7, 2026

• Add TypeScript without dependency on @types/eslint-plugin-security

  Feature

  eslint-community/eslint-plugin-security#177 · Filter by author thernstig opened on Sep 14, 2025
  4

• New Rule: disallow unicode confusable identifiers

  Feature

  eslint-community/eslint-plugin-security#117 · Filter by author mhofman opened on Mar 1, 2023
  4

• Deprecate detect-buffer-noassert

  Feature

  eslint-community/eslint-plugin-security#83 · Filter by author nzakas opened on Apr 18, 2022

• Help wanted: Issue and PR Review

  help wanted
  eslint-community/eslint-plugin-security#76 · Filter by author nzakas opened on Mar 24, 2022
  2

• Is this a timing attack?

  eslint-community/eslint-plugin-security#70 · Filter by author jimisaacs opened on Oct 13, 2021
  4

• Better unsafe regex detector

  eslint-community/eslint-plugin-security#28 · Filter by author davisjam opened on Mar 29, 2018
  35

• Several issues with using this plugin

  Bug

  eslint-community/eslint-plugin-security#22 · Filter by author rossPatton opened on Oct 24, 2017
  3

• A more relevant "detect-object-injection"

  help wanted
  eslint-community/eslint-plugin-security#21 · Filter by author benderTheCrime opened on Aug 30, 2017
  20