GCVE - cpe:2.3:a:magix-combine-ex_project:magix-combine-ex:*:*:*:*:*:node.js:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:magix-combine-ex_project:magix-combine-ex:*:*:*:*:*:node.js:*:*

part: a version: * update: *

Vendor	Magix Combine Ex Project (`e9a90139-165e-5d44-bfed-84124695f755`)
Product	Magix Combine Ex (`20230bdd-d8ea-5dda-98c5-b60c8ab40b3b`)
Edition	*
Language	*
Software edition	*
Target software	node.js
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-57321`	vulnerable	2026-06-08 07:33:15.867677	Details available A Prototype Pollution vulnerability in the util-deps.addFileDepend function of magix-combine-ex versions thru 1.2.10 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence. Published: 2025-09-24T00:00:00.000Z Updated: 2025-09-26T17:57:19.458Z Open on db.gcve.eu Reference links https://github.com/VulnSageAgent/PoCs/blob/main/JavaScript/prototype-pollution/magix-combine-ex%401.2.10/index.js https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57321	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.