CVE-2025-3197
1 advisory.
npm/expand-object CVE-2025-3197: high 7.3, EPSS 0.41%
expand-object Vulnerable to Prototype Pollution via the expand() Function
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.4.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-4vjr-hfpp-2m7w
- https://nvd.nist.gov/vuln/detail/CVE-2025-3197
- https://gist.github.com/miguelafmonteiro/d8f66af61d14e06338b688f90c4dfa7c
- https://github.com/jonschlinkert/expand-object
- https://github.com/jonschlinkert/expand-object/blob/master/index.js#L13
- https://security.snyk.io/vuln/SNYK-JS-EXPANDOBJECT-5821390
CVE-2025-3197 · published · modified · JSON