Prototype Pollution in Denoland Std
CVE-2025-55195
@std/toml is the Deno Standard Library. Prior to version 1.0.9, an attacker can pollute the prototype chain in Node.js runtime and Browser when parsing untrusted TOML data, thus achieving Prototype Pollution (PP) vulnerability. This is bec…
Vulnerability class: Prototype Pollution
EPSS: 0.003 (22.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Denoland Std — versions < 1.0.9
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2025-55195?
- CVE-2025-55195 is a high-severity vulnerability in Denoland Std, classified under Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution). CVSS score: 7.3/10. Published 2025-08-14.
- How severe is CVE-2025-55195?
- High severity. CVSS v3 base score is 7.3 out of 10.