← Back to browse · API

CVE-2021-25928

Severity
CRITICAL
CVSS
9.8
EPSS
0.03327
Risk score
40.36
CISA KEV
No
PoC
No
Published
2021-04-26
Modified
2025-04-30
First seen
2026-08-07
Aliases
EUVD-2021-1417, GHSA-WPGH-HMV4-R3V5
Products
n/a:safe-obj 1.0.0, 1.0.1, 1.0.2
Sources
euvd EUVD-2021-1417

Description

Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution.

References