CVE-2025-57328

The toggle-array JavaScript package (versions v1.0.1 and before ) is vulnerable to a Prototype Pollution flaw within its enable and disable functions. Attackers can exploit this by supplying a crafted payload to inject arbitrary properties onto Object.prototype . This vulnerability can lead to a ...