CVE-2025-57350

The csvtojson package (prior to version 2.0.10 ) is vulnerable to a prototype pollution vulnerability in the parser_jsonarray component due to insufficient sanitization of nested header names. An attacker providing a maliciously constructed CSV file with fields referencing prototype chains (e.g.,...