CVE-2021-25945

CVE-2021-25945 describes a critical prototype pollution vulnerability in js-extend versions 0.0.1 through 1.0.1, allowing unauthenticated attackers to cause a denial of service and potentially achieve remote code execution. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, leading to high impacts on confidentiality, integrity, and availability. Despite its severity, there is currently no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage.