Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2021-25928: Prototype Pollution in 'safe-obj' Could Cause Service Disruption
CVE-2021-25928 · published 5 years ago
Summary
The 'safe-obj' library, used in some applications, has a security flaw that could allow an attacker to crash the system or run malicious code. This could happen if an attacker is able to inject malicious data into the system. If you use 'safe-obj', update it to a fixed version to prevent potential disruptions.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| npm | tandrewnichols | safe-obj | >= 1.0.0, <= 1.0.2 |
| – | manta | safe-obj |
>= 1.0.0, <= 1.0.2 cpe:2.3:a:manta:safe-obj:*:*:*:*:*:*:*:* |
Original advisory text
Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution.
Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-1321Prototype Pollution
Timeline
Published26 Apr 2021
Updated4 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta