npm/csvtojson CVE-2025-57350: medium, EPSS 0.31%
CSVTOJSON has a prototype pollution vulnerability
Action: Upgrade csvtojson to 2.0.13 or later.
npm i csvtojson@2.0.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.13 | - |
Fixed versions
| 2.0.13 |
Sources
- osv: GHSA-vrw9-g62v-7fmf
- https://nvd.nist.gov/vuln/detail/CVE-2025-57350
- https://github.com/Keyang/node-csvtojson/issues/498
- https://github.com/Keyang/node-csvtojson/issues/502
- https://github.com/Keyang/node-csvtojson/commit/4caeebd13b67be63282a7bbed3ca0cf9813f4bfc
- https://github.com/Keyang/node-csvtojson
- https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57350
- https://security.snyk.io/vuln/SNYK-JS-CSVTOJSON-13109616
CVE-2025-57350 · published · modified · JSON