CVE-2025-57328

The toggle-array package (versions v1.0.1 and before) is vulnerable to a Prototype Pollution vulnerability within its enable and disable functions. This issue stems from improper input validation, allowing an attacker to supply a crafted payload to inject properties into Object.prototype . Such p...