CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
eslint-config-prettier Supply Chain Compromise and Malware Execution Vulnerability (CVE-2025-54313)
[Affected Scope] Windows development and build environments utilizing eslint-config-prettier package versions 8.10.1, 9.1.1, 10.1.6, and 10.1.7
[Impact] Installation of the compromised package triggers automatic execution of install.js, dropping and executing the node-gyp.dll malware to compromise the host system
[Mitigation] Immediately uninstall the compromised versions, force-downgrade or upgrade to a clean version, and scan systems for malicious DLL files
Node.js systeminformation Command Injection Vulnerability (CVE-2021-21315)
[Affected Scope] Applications running Node.js environments utilizing the 'systeminformation' npm package versions prior to 5.3.1
[Impact] Remote attackers can inject and execute arbitrary system commands via parameter manipulation, potentially leading to full host compromise
[Mitigation] Immediately upgrade the 'systeminformation' package to version 5.3.1 or higher