CVE-2025-57348

The node-cube package prior to version 5.0.0 contains a vulnerability in its handling of prototype chain initialization, which could allow an attacker to inject properties into the prototype of built-in objects. This issue, categorized under CWE-1321, arises from improper validation of...

CVE-2025-57348

The node-cube package (prior to version 5.0.0) is vulnerable to Prototype Pollution (CWE-1321) due to improper validation of user-supplied input during the resource initialization process . This allows an attacker to inject malicious properties into the prototype of built-in objects, which can le...