Prototype Pollution Vulnerability in Fast-Redact Package by GitHub
CVE-2025-57319
7.5HIGH
What is CVE-2025-57319?
A vulnerability exists in the fast-redact package due to improper handling of nested object restoration in version 3.5.0 and earlier. Attackers can exploit this flaw by providing a specially crafted payload that injects properties into Object.prototype. This may lead to various consequences, with the potential for denial of service being a minimum outcome. Addressing this issue is crucial to maintaining the security and integrity of applications utilizing this package.
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved