Approved changes feed: RSS · Atom

cpe:2.3:a:pradeep-mishra:csvjson:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorPradeep Mishra (3511e871-9fc5-58bc-aac2-36f3fed5c4ee)
ProductCsvjson (f0aeab74-aaff-5a98-a7ae-8de8ba10ace6)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/pradeep-mishra/csvjson purl2cpe 2026-06-01 10:15:24.223884
pkg:npm/csvjson purl2cpe 2026-06-01 10:15:24.223887

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-57318 vulnerable 2026-06-08 07:33:15.864888 Details available
A Prototype Pollution vulnerability in the toCsv function of csvjson versions thru 5.1.0 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.
Published: 2025-09-24T00:00:00.000Z
Updated: 2025-09-25T15:24:35.575Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.