CVE-2021-25945: Js-Extend Project Js-Extend

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.

Affected products

• Js-Extend Project Js-Extend: from 0.0.1, up to and including 1.0.1

Published 2021-05-26. Last modified 2026-06-17.