Skip to content

Product

npm min-document vulnerabilities

1 published CVE affecting npm min-document, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest npm min-document CVEs

Newest publication first

  1. CVE-2025-57352 min-document vulnerable to prototype pollution

    Published
    MediumCVSS 5.3 EPSS 0.36% PoC

    A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of Jav...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.