Lucene search
+L

2 matches found

OSV
OSV
added 2025/04/07 2:56 p.m.16 views

CVE-2025-32014 estree-util-value-to-estree allows prototype pollution in generated ESTree

estree-util-value-to-estree converts a JavaScript value to an ESTree expression. When generating an ESTree from a value with a property named proto, valueToEstree would generate an object that specifies a prototype instead. This vulnerability is fixed in 3.3.3...

6.9CVSS6.2AI score0.00421EPSS
SaveExploits0References4
Rows per page
Query Builder