CVE-2025-57820
1 advisory.
npm/devalue CVE-2025-57820: high, EPSS 0.37%
devalue prototype pollution vulnerability
Action: Upgrade devalue to 5.3.2 or later.
npm i devalue@5.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.3.2 | - |
Fixed versions
| 5.3.2 |
Sources
- osv: GHSA-vj54-72f3-p5jv
- https://github.com/sveltejs/devalue/security/advisories/GHSA-vj54-72f3-p5jv
- https://nvd.nist.gov/vuln/detail/CVE-2025-57820
- https://github.com/sveltejs/devalue/commit/0623a47c9555b639c03ff1baea82951b2d9d1132
- https://github.com/sveltejs/devalue
CVE-2025-57820 · published · modified · JSON