Skip to content
OpenAdvisories

Vendor

remcohaszing

1 known vulnerabilities.

Products

estree-util-value-to-estree 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-32014

    estree-util-value-to-estree allows prototype pollution in generated ESTree

    estree-util-value-to-estree converts a JavaScript value to an ESTree expression. When generating an ESTree from a value with a property named __proto__, valueToEstree would generate an object that specifies a prototype instead. This vulnerability is fixed in …

    remcohaszing estree-util-value-to-estree estree-util-value-to-estree npm