{"action":"Upgrade content-security-policy-parser to 0.6.0 or later.","affected":[{"fixed":"0.6.0","introduced":"0"}],"component":"content-security-policy-parser","cve_ids":["CVE-2025-55164"],"ecosystem":"npm","epss":0.00441,"exploited":false,"fixed_versions":["0.6.0"],"ghsa_id":"GHSA-w2cq-g8g3-gm83","id":"tcs_01M5KGDJ52KWJD82B74WS68Z79","modified_at":"2025-08-12T19:19:42Z","published_at":"2025-08-12T18:07:44Z","references":["https://osv.dev/vulnerability/GHSA-w2cq-g8g3-gm83","https://github.com/helmetjs/content-security-policy-parser/security/advisories/GHSA-w2cq-g8g3-gm83","https://nvd.nist.gov/vuln/detail/CVE-2025-55164","https://github.com/helmetjs/content-security-policy-parser/issues/11","https://github.com/helmetjs/content-security-policy-parser/commit/b13a52554f0168af393e3e38ed4a94e9e6aea9dc","https://github.com/helmetjs/content-security-policy-parser"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-w2cq-g8g3-gm83","url":"https://osv.dev/vulnerability/GHSA-w2cq-g8g3-gm83"},{"source":"nvd","source_id":"CVE-2025-55164","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55164"}],"summary":"content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCE"}