CVE-2025-57318High · CVSS 7.5EPSS 0.39%No fix publishedCVE-2025-57318A Prototype Pollution vulnerability in the toCsv function of csvjson versions thru 5.1.0 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.csvjsonNode.jsPublished September 24, 2025Updated September 25, 2025Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗