Prototype Pollution Vulnerability in Fast-Redact Package by GitHub

CVE-2025-57319

What is CVE-2025-57319?

A vulnerability exists in the fast-redact package due to improper handling of nested object restoration in version 3.5.0 and earlier. Attackers can exploit this flaw by providing a specially crafted payload that injects properties into Object.prototype. This may lead to various consequences, with the potential for denial of service being a minimum outcome. Addressing this issue is crucial to maintaining the security and integrity of applications utilizing this package.

References