Skip to content
OpenAdvisories

Package · npm

content-security-policy-parser

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2025-55164

    content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCE

    content-security-policy-parser parses content security policy directives. A prototype pollution vulnerability exists in versions 0.5.0 and earlier, wherein if a policy name is called __proto__, one can override the Object prototype. This issue has been patche…

    helmetjs content-security-policy-parser content-security-policy-parser npm