{"action":"Upgrade estree-util-value-to-estree to 3.3.3 or later.","affected":[{"fixed":"3.3.3","introduced":"0"}],"component":"estree-util-value-to-estree","cve_ids":["CVE-2025-32014"],"ecosystem":"npm","epss":0.00456,"exploited":false,"fixed_versions":["3.3.3"],"ghsa_id":"GHSA-f7f6-9jq7-3rqj","id":"tcs_01M5KFMTZANCPA8464V4PNJ4AQ","modified_at":"2025-04-07T19:57:11.311550Z","published_at":"2025-04-07T19:09:48Z","references":["https://osv.dev/vulnerability/GHSA-f7f6-9jq7-3rqj","https://github.com/remcohaszing/estree-util-value-to-estree/security/advisories/GHSA-f7f6-9jq7-3rqj","https://nvd.nist.gov/vuln/detail/CVE-2025-32014","https://github.com/remcohaszing/estree-util-value-to-estree/commit/d0c394fbc64bc55937ffe4e162b81f15ba506e55","https://github.com/remcohaszing/estree-util-value-to-estree"],"severity":{"label":"medium","score":6.9},"sources":[{"source":"osv","source_id":"GHSA-f7f6-9jq7-3rqj","url":"https://osv.dev/vulnerability/GHSA-f7f6-9jq7-3rqj"},{"source":"nvd","source_id":"CVE-2025-32014","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32014"}],"summary":"estree-util-value-to-estree allows prototype pollution in generated ESTree"}