CVE-2021-25915: Changeset Project Changeset

Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days.

Prototype pollution vulnerability in 'changeset' versions 0.0.1 through 0.2.5 allows an attacker to cause a denial of service and may lead to remote code execution.

Affected products

• Changeset Project Changeset: from 0.0.1, before 0.2.6 (fixed in 0.2.6)

Published 2021-03-09. Last modified 2026-06-17.