CVE-2025-57328 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Po…
High CVSS: 7.5

CVE-2025-57328

toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Pollution vulnerability in the enable and disable function of toggle-array v1.0.1 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.
Vendor
Jonschlinkert
Product
Toggle-array
CWE
CWE-1321
Yayın Tarihi
2025-09-24 20:15:32
Güncelleme
2025-10-20 16:50:08
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

Referanslar