CVE-2025-57329

CVE-2025-57329 is a Prototype Pollution vulnerability affecting web3-core-method versions 1.10.4 and earlier, which is part of the web3js ecosystem. This flaw allows attackers to inject properties into Object.prototype through crafted payloads, potentially leading to a denial of service. With a CVSS score of 7.5 (HIGH), the vulnerability has a network attack vector and low attack complexity, requiring no user interaction or privileges. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.