CVE-2025-57350

The csvtojson package (versions prior to 2.0.10 ) contains a prototype pollution vulnerability (CWE-1321) due to insufficient sanitization of nested header names in the parser_jsonarray component. Processing specially crafted CSV files with fields referencing prototype chains (e.g., __proto__) ca...