Prototype Pollution

mpregular is vulnerable to Prototype Pollution. The vulnerability is due to insufficient validation of user-supplied input in the mp.addEventHandler function, which allows an attacker to inject arbitrary properties into Object.prototype, potentially leading to denial of service or other unexpecte...

CVE-2025-57323: Improperly Controlled Modification of Object Prototype Attributes

mpregular is a package that provides a small program development framework based on RegularJS. A Prototype Pollution vulnerability in the mp.addEventHandler function of mpregular version 0.2.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload,...