acharts (=1.0.34), amb (>=2.1.1 <=2.1.3) +48 more potentially affected by CVE-2025-57327 via spmrc (>=0.1.0 <=1.2.0)

spmrc NPM version =0.1.0, =2.1.1, =1.4.1, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =0.1.3, =0.5.8, =0.0.1, =0.2.1, =0.5.12 and more Source cves: CVE-2025-57327 Source advisory: SNYK:JS-SPMRC-13110015...

acharts (=1.0.34), amb (>=2.1.1 <=2.1.3) +48 more potentially affected by CVE-2025-57327 via spmrc (>=0.1.0 <=1.2.0)

spmrc NPM version =0.1.0, =2.1.1, =1.4.1, =0.1.0, =0.2.0, =0.2.0, =0.1.0, =0.1.3, =0.5.8, =0.0.1, =0.2.1, =0.5.12 and more Source cves: CVE-2025-57327 Source advisory: OSV:GHSA-R2RV-8PP3-65XW...

CVE-2025-57327

CVE-2025-57327 affects the spmrc package (rc manager for spm) and describes a Prototype Pollution vulnerability in the set and config functions. The vulnerability lets an attacker inject properties into Object.prototype via a crafted payload, with the minimum consequence being Denial of Service. ...