content-security-policy-parser vulnerabilities

1 known vulnerability in content-security-policy-parser from Helmetjs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  content-security-policy-parser: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2025-55164Aug 12, 2025Helmetjs

  content-security-policy-parser parses content security policy directives. A prototype pollution vulnerability exists in versions 0.5.0 and earlier, wherein if a policy name is called __proto__, one can override the Object prototype. This issue has been patched