CVE-2025-57319

fast-redact is a package that provides do very fast object redaction. A Prototype Pollution vulnerability in the nestedRestore function of fast-redact version 3.5.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence. NOTE: the Supplier disputes this because the reporter only demonstrated access to properties by an internal utility function, and there is no means for achieving prototype pollution via the public API.

• https://github.com/VulnSageAgent/PoCs/blob/main/JavaScript/prototype-pollution/fast-redact%403.5.0/index.js
• https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57319
• https://github.com/davidmarkclements/fast-redact/issues/75

Published

Sep 24, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-5730The Contact Form Plugin WordPress plugin before 1.1.29 does …4.3
• CVE-2025-57305VitaraCharts 5.3.5 is vulnerable to Server-Side Request Forg…6.5
• CVE-2025-5731A flaw was found in Infinispan CLI. A sensitive password, de…5.5
• CVE-2025-57310A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2…8.8
• CVE-2025-57317apidoc-core is the core parser library to generate apidoc re…7.5
• CVE-2025-57318A Prototype Pollution vulnerability in the toCsv function of…7.5
• CVE-2025-5732A vulnerability, which was classified as problematic, was fo…8.8
• CVE-2025-57320json-schema-editor-visual is a package that provides jsonsch…6.5
• CVE-2025-57321A Prototype Pollution vulnerability in the util-deps.addFile…9.8
• CVE-2025-57323mpregular is a package that provides a small program develop…7.5
• CVE-2025-57324parse is a package designed to parse JavaScript SDK. A Proto…6.5
• CVE-2025-57325rollbar is a package designed to effortlessly track and debu…7.5