https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T16:16:06.704839+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-32014 CVE-2025-32014 — estree-util-value-to-estree allows prototype pollution in generated ESTree 2026-10-15T16:16:06.719971+00:00

Affected: remcohaszing estree-util-value-to-estree

estree-util-value-to-estree converts a JavaScript value to an ESTree expression. When generating an ESTree from a value with a property named __proto__, valueToEstree would generate an object that specifies a prototype instead. This vulnerability is fixed in 3.3.3.