PT-2025-39336
CVE-2025-57327
·
Published
2025-09-24
·
Updated
2025-10-20
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
spmrc versions prior to 1.2.0
Description
spmrc is a package that provides the rc manager for spm. A Prototype Pollution vulnerability exists in the
set and config functions. This allows attackers to inject properties on Object.prototype by supplying a crafted payload. This can lead to a denial of service (DoS).Recommendations
Update spmrc to version 1.2.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾