CVE-2025-57327

CVE-2025-57327 affects the spmrc package (rc manager for spm) and describes a Prototype Pollution vulnerability in the set and config functions. The vulnerability lets an attacker inject properties into Object.prototype via a crafted payload, with the minimum consequence being Denial of Service. ...