CVE-2025-57327

CVE-2025-57327 is a Prototype Pollution vulnerability affecting spmrc versions 1.2.0 and earlier, a package used for managing spm configurations. This flaw allows unauthenticated attackers to inject properties into Object.prototype through specially crafted payloads, leading to a denial of service. With a CVSS score of 7.5 (HIGH), the vulnerability is easily exploitable over the network with low attack complexity, though it primarily impacts availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.