CVE-2025-57325

HIGH

Rollbar < 2.26.4 - Prototype Pollution

Title source: rule
STIX 2.1

Description

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. A Prototype Pollution vulnerability in the utility.set function of rollbar v2.26.4 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.

Scores

CVSS v3 7.5
EPSS 0.0013
EPSS Percentile 31.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-1321
Status published
Products (2)
npm/rollbar 0 - 2.26.5npm
rollbar/rollbar < 2.26.4
Published Sep 24, 2025
Tracked Since Feb 18, 2026