CVE-2025-57352

CVE-2025-57352 is a prototype pollution vulnerability in the 'min-document' package prior to version 2.19.0, specifically impacting its removeAttributeNS method. An attacker can exploit this by manipulating the __proto__ property through malicious input, leading to denial of service or arbitrary code execution. This vulnerability is rated Medium severity (CVSS 5.3) with a network attack vector and low attack complexity, requiring no user interaction or privileges. The potential impact includes partial confidentiality loss and no integrity or availability impact according to the CVSS vector, though the description mentions denial of service and arbitrary code execution. Currently, there is no evidence of active exploitation, nor are there any public exploits available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.