Node-cube 5.0.0 Beta 3 for Node.js

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:node-cube:node-cube:5.0.0:beta3:*:*:*:node.js:*:*

part: a version: 5.0.0 update: beta3

VendorNode Cube (a8ca02cd-5ff1-5c4c-81cd-b61e31e49328)
ProductNode Cube (8df639b6-7de5-529a-bb10-462ce082dcaa)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/node-cube/cube purl2cpe 2026-06-01 10:11:51.194934
pkg:npm/node-cube purl2cpe 2026-06-01 10:11:51.194936

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-57348 vulnerable 2026-06-08 07:33:15.895077 Details available
The node-cube package (prior to version 5.0.0) contains a vulnerability in its handling of prototype chain initialization, which could allow an attacker to inject properties into the prototype of built-in objects. This issue, categorized under CWE-1321, arises from improper validation of user-supplied input in the package's resource initialization process. Successful exploitation may lead to denial of service or arbitrary code execution in affected environments. The vulnerability affects versions up to and including 5.0.0-beta.19, and no official fix has been released to date.
Published: 2025-09-24T00:00:00.000Z
Updated: 2025-09-25T18:28:54.401Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.