CVE-2025-32014

estree-util-value-to-estree converts a JavaScript value to an ESTree expression. When generating an ESTree from a value with a property named __proto__, valueToEstree would generate an object that specifies a prototype instead. This vulnerability is fixed in 3.3.3.
CVSS

No CVSS.

Configurations

No configuration.

History

07 Apr 2025, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-07 15:15

Updated : 2025-04-07 15:15


NVD link : CVE-2025-32014

Mitre link : CVE-2025-32014


JSON object : View

Products Affected

No product.

CWE
CWE-1321

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')