CVE-2025-32014
estree-util-value-to-estree converts a JavaScript value to an ESTree expression. When generating an ESTree from a value with a property named __proto__, valueToEstree would generate an object that specifies a prototype instead. This vulnerability is fixed in 3.3.3.
Open
NONE (0.0)
System detected CVE-2025-32014
System removed scanner: container-scanning github.com/l3montree-dev/devguard/cmd/devguard-scanner/container-scanning
System removed scanner: container-scanning github.com/l3montree-dev/devguard/cmd/devguard-scanner/container-scanning
Add a comment
Last calculated at:
Affected component
estree-util-value-to-estree
Quick Fix
Update all Dependencies
Update only estree-util-value-to-estree