radashi Allows Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Description

This is a prototype pollution vulnerability. It impacts users of the set function within the Radashi library.

Recommendation

Update the radashi package to the latest compatible version. Followings are version details:

• Affected version(s): < 12.5.1
• Patched version(s): 12.5.1

References

• GHSA-2xv9-ghh9-xc69
• CVE-2025-48054
• CWE-1321
• CAPEC-310
• OWASP 2021-A6

Related Issues

• mathjs Allows Improperly Controlled Modification of Dynamically-Determined Object Attributes - CVE-2026-41139
• Improperly Controlled Modification of Object Prototype Attributes - Vulnerability
• Improperly Controlled Modification of Dynamically-Determined Object Attributes in utilitify - CVE-2019-10808
• Improperly Controlled Modification of Dynamically-Determined Object Attributes in vega-util - CVE-2019-10806

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

radashi