{"action":"Upgrade csvtojson to 2.0.13 or later.","affected":[{"fixed":"2.0.13","introduced":"0"}],"component":"csvtojson","cve_ids":["CVE-2025-57350"],"ecosystem":"npm","epss":0.00313,"exploited":false,"fixed_versions":["2.0.13"],"ghsa_id":"GHSA-vrw9-g62v-7fmf","id":"tcs_01M5KGCY3ZA2WMJRNASCG5MH32","modified_at":"2026-09-10T03:50:28.851024126Z","published_at":"2025-09-24T18:30:31Z","references":["https://osv.dev/vulnerability/GHSA-vrw9-g62v-7fmf","https://nvd.nist.gov/vuln/detail/CVE-2025-57350","https://github.com/Keyang/node-csvtojson/issues/498","https://github.com/Keyang/node-csvtojson/issues/502","https://github.com/Keyang/node-csvtojson/commit/4caeebd13b67be63282a7bbed3ca0cf9813f4bfc","https://github.com/Keyang/node-csvtojson","https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57350","https://security.snyk.io/vuln/SNYK-JS-CSVTOJSON-13109616"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vrw9-g62v-7fmf","url":"https://osv.dev/vulnerability/GHSA-vrw9-g62v-7fmf"}],"summary":"CSVTOJSON has a prototype pollution vulnerability"}