CVE-2025-57328
- Source
- https://cve.org/CVERecord?id=CVE-2025-57328
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-57328.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-57328
- Aliases
- Published
- 2025-09-24T20:15:32.540Z
- Modified
- 2026-01-09T19:15:53.942862Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Pollution vulnerability in the enable and disable function of toggle-array v1.0.1 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.
- References