CVE-2025-57323

The mpregular package, a small program development framework based on RegularJS, is vulnerable to Prototype Pollution in the mp.addEventHandler function. This flaw exists because of insufficient validation of user-supplied input, allowing an attacker to inject arbitrary properties into Object.pro...