CVE-2021-25952

CVE-2021-25952 is a critical prototype pollution vulnerability affecting just-safe-set versions 1.0.0 through 2.2.1. This flaw allows an unauthenticated attacker to cause a denial of service and potentially achieve remote code execution. With a CVSS score of 9.8, it represents a high-impact, low-complexity threat that can be exploited over the network. While there is no evidence of active exploitation or publicly available exploit code, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.