CVE-2025-32014
1 advisory.
npm/estree-util-value-to-estree CVE-2025-32014: medium
estree-util-value-to-estree allows prototype pollution in generated ESTree
Action: Upgrade estree-util-value-to-estree to 3.3.3 or later.
npm i estree-util-value-to-estree@3.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.3 | - |
Fixed versions
| 3.3.3 |
Sources
- osv: GHSA-f7f6-9jq7-3rqj
- https://github.com/remcohaszing/estree-util-value-to-estree/security/advisories/GHSA-f7f6-9jq7-3rqj
- https://nvd.nist.gov/vuln/detail/CVE-2025-32014
- https://github.com/remcohaszing/estree-util-value-to-estree/commit/d0c394fbc64bc55937ffe4e162b81f15ba506e55
- https://github.com/remcohaszing/estree-util-value-to-estree
CVE-2025-32014 · published · modified · JSON