Improve GHSA-f29h-pxvx-f335

ocsurfnut · ocsurfnut · commit 20433e95c18f · 2025-07-22T15:10:30.000-04:00
diff --git a/advisories/github-reviewed/2025/07/GHSA-f29h-pxvx-f335/GHSA-f29h-pxvx-f335.json b/advisories/github-reviewed/2025/07/GHSA-f29h-pxvx-f335/GHSA-f29h-pxvx-f335.json
@@ -1,19 +1,14 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f29h-pxvx-f335",
-  "modified": "2025-07-22T16:23:21Z",
+  "modified": "2025-07-22T16:23:22Z",
   "published": "2025-07-19T18:30:33Z",
   "aliases": [
     "CVE-2025-54313"
   ],
   "summary": "eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code",
   "details": "eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.",
-  "severity": [
-    {
-      "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N"
-    }
-  ],
+  "severity": [],
   "affected": [
     {
       "package": {
@@ -270,7 +265,7 @@
     "cwe_ids": [
       "CWE-506"
     ],
-    "severity": "HIGH",
+    "severity": "CRITICAL",
     "github_reviewed": true,
     "github_reviewed_at": "2025-07-21T21:01:18Z",
     "nvd_published_at": "2025-07-19T17:15:23Z"
