CyberSecBulletin

Prettier vulnerabilities

We track 1 vulnerability in Prettier products across 2 products. 1 is rated high or critical, and 1 has been exploited in real attacks. The most recent was published on July 19, 2025.

1vulnerabilities
0critical
1high
1exploited
7.5average CVSS score

Latest Prettier vulnerabilities

  • 7.5 High severity

    Prettier eslint-config-prettier Embedded Malicious Code Exploited

    CVE-2025-54313PrettierEPSS 5.13%

    eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.