Eslint Plugin Vulnerability in Supabase URI Exposed

CVE-2025-57754

What is CVE-2025-57754?

The eslint-ban-moment plugin, used for Eslint in the final assignment at VIHU, exposes a sensitive Supabase URI in its .env file in versions 3.0.0 and earlier. This URI contains embedded username and password information, enabling potential attackers to gain complete unauthorized access to the database and user data. Such exploitation can result in serious consequences including data exfiltration, modification, or deletion, thus compromising the integrity and confidentiality of the system.

References