radashi Allows Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Description

This is a prototype pollution vulnerability. It impacts users of the set function within the Radashi library.

Recommendation

Update the radashi package to the latest compatible version. Followings are version details:

Affected version(s): < 12.5.1
Patched version(s): 12.5.1

References

GHSA-2xv9-ghh9-xc69
CVE-2025-48054
CWE-1321
CAPEC-310
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for radashi Allows Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') and gives you actionable findings to investigate.

Start a free scan

Related Issues

mathjs Allows Improperly Controlled Modification of Dynamically-Determined Object Attributes - CVE-2026-41139
Improperly Controlled Modification of Object Prototype Attributes - Vulnerability
Improperly Controlled Modification of Dynamically-Determined Object Attributes in utilitify - CVE-2019-10808
Improperly Controlled Modification of Dynamically-Determined Object Attributes in vega-util - CVE-2019-10806

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated May 27, 2025