Prototype Pollution Vulnerability in Fast-Redact Package by GitHub
CVE-2025-57319

7.5HIGH

Key Information:

Vendor

GitHub
Status
fast-redact
Vendor
CVE Published:
24 September 2025

What is CVE-2025-57319?

A vulnerability exists in the fast-redact package due to improper handling of nested object restoration in version 3.5.0 and earlier. Attackers can exploit this flaw by providing a specially crafted payload that injects properties into Object.prototype. This may lead to various consequences, with the potential for denial of service being a minimum outcome. Addressing this issue is crucial to maintaining the security and integrity of applications utilizing this package.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/VulnSageAgent/PoCs/blob/main/JavaScrip...
https://github.com/VulnSageAgent/PoCs/tree/main/JavaScrip...
https://github.com/davidmarkclements/fast-redact/issues/75

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.