CVE-2025-3197
Versions of the package expand-object from 0.0.0 are vulnerable to Prototype Pollution in the expand() function in index.js. This function expands the given string into an objec…
Published: 2025-04-04 · CVSS: 6.9 · CVSS 4.0
Versions of the package expand-object from 0.0.0 are vulnerable to Prototype Pollution in the expand() function in index.js. This function expands the given string into an object and allows a nested property to be set without checking the provided keys for sensitive properties like __proto__.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7