CVE-2025-55164
1 advisory.
npm/content-security-policy-parser CVE-2025-55164: high
content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCE
Action: Upgrade content-security-policy-parser to 0.6.0 or later.
npm i content-security-policy-parser@0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-w2cq-g8g3-gm83
- https://github.com/helmetjs/content-security-policy-parser/security/advisories/GHSA-w2cq-g8g3-gm83
- https://nvd.nist.gov/vuln/detail/CVE-2025-55164
- https://github.com/helmetjs/content-security-policy-parser/issues/11
- https://github.com/helmetjs/content-security-policy-parser/commit/b13a52554f0168af393e3e38ed4a94e9e6aea9dc
- https://github.com/helmetjs/content-security-policy-parser
CVE-2025-55164 · published · modified · JSON