CVE-2025-57325

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. A Prototype Pollution vulnerability in the utility.set function of rollbar v2.26.4 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.

• CWE-1321

• https://github.com/VulnSageAgent/PoCs/blob/main/JavaScript/prototype-pollution/rollbar%402.26.4/index.jsBroken Link
• https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57325Third Party Advisory

Published

Sep 24, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-57319fast-redact is a package that provides do very fast object r…7.5
• CVE-2025-5732A vulnerability, which was classified as problematic, was fo…8.8
• CVE-2025-57320json-schema-editor-visual is a package that provides jsonsch…6.5
• CVE-2025-57321A Prototype Pollution vulnerability in the util-deps.addFile…9.8
• CVE-2025-57323mpregular is a package that provides a small program develop…7.5
• CVE-2025-57324parse is a package designed to parse JavaScript SDK. A Proto…6.5
• CVE-2025-57326A Prototype Pollution vulnerability in the byGroupAndType fu…7.5
• CVE-2025-57327spmrc is a package that provides the rc manager for spm. A P…7.5
• CVE-2025-57328toggle-array is a package designed to enables a property on …7.5
• CVE-2025-57329web3-core-method is a package designed to creates the method…7.5
• CVE-2025-5733The Modern Events Calendar Lite plugin for WordPress is vuln…5.3
• CVE-2025-57330The web3-core-subscriptions is a package designed to manages…7.5