acharts (1.0.34), amb (>=2.1.1, <=2.1.3) +48 more potentially affected by CVE-2025-57327 via spmrc (>=0.1.0, <=1.2.0)

spmrc NPM version =0.1.0, =2.1.1, =1.4.1, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =0.1.3, =0.5.8, =0.0.1, =0.2.1, =0.5.12 and more Source cves: CVE-2025-57327 Source advisory: SNYK:JS-SPMRC-13110015...

CVE-2025-57327

The spmrc package (an rc manager for spm) is vulnerable to a Prototype Pollution vulnerability in its set and config functions. This flaw exists in spmrc version 1.2.0 and before because of improper input validation, which allows an attacker to inject properties into Object.prototype via a crafte...