CVE-2025-48054: radashi Allows Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
This is a prototype pollution vulnerability. It impacts users of the set
function within the Radashi library. If an attacker can control parts of the path
argument to the set
function, they could potentially modify the prototype of all objects in the JavaScript runtime, leading to unexpected behavior, denial of service, or even remote code execution in some specific scenarios.
References
Code Behaviors & Features
Detect and mitigate CVE-2025-48054 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →