Skip to content
OpenAdvisories

Package · npm

expand-object

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.3
    CVE-2025-3197

    expand-object Vulnerable to Prototype Pollution via the expand() Function

    Versions of the package expand-object from 0.0.0 are vulnerable to Prototype Pollution in the expand() function in index.js. This function expands the given string into an object and allows a nested property to be set without checking the provided keys for se…

    expand-object npm