CVE-2025-57348
1 advisory.
npm/node-cube CVE-2025-57348: low, EPSS 0.41%
node-cube vulnerable to prototype pollution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.0.0-beta.19 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8v65-5fw5-23wj
- https://nvd.nist.gov/vuln/detail/CVE-2025-57348
- https://github.com/node-cube/cube/issues/153
- https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57348
- https://github.com/node-cube/cube
CVE-2025-57348 · published · modified · JSON