{"schemaVersion":3,"id":"CVE-2025-57352","aliases":["UBUNTU-CVE-2025-57352","DEBIAN-CVE-2025-57352","CGA-53cj-wp3p-xfgr","CGA-67vw-cfv4-h468","CGA-73ff-fjjj-hcjj","CGA-fc6f-798w-4cfm","CGA-qhv9-37pr-p8fr","CGA-r4f8-xwvq-gjmp","GHSA-rx8g-88g5-qh64","CGA-239x-62p4-j2x6","CGA-2m2v-gqhc-vqm5","CGA-2vv4-9w89-q8wj","CGA-2w9m-x59q-jw4p","CGA-3h87-jqxp-f48w","CGA-3hqm-g723-j3mw","CGA-42pc-x8cv-r887","CGA-5297-4q33-c76j","CGA-534p-xvmp-v772","CGA-535p-9g8p-776c","CGA-5gjx-4qgq-4hr9","CGA-6jwv-pg8r-wc42","CGA-6p8m-8p6x-29pc","CGA-6qpf-jrw4-m5w6","CGA-736f-52r7-f8wv","CGA-7h6w-j992-94p2","CGA-7jgc-vpwv-x57r","CGA-7pp8-3m82-p3xh","CGA-7q9p-jv3x-m44w","CGA-7wwg-q35v-cv4g","CGA-836m-qjxg-7388","CGA-8qf5-hq9v-49wm","CGA-8x8q-v5wv-2rvv","CGA-9fc7-875h-75hx","CGA-9pcj-94wq-rwrq","CGA-ccf6-54xw-fqwv","CGA-ccxx-7c7h-8w2r","CGA-cr2m-hwxf-3cv3","CGA-cvqf-8r23-56mx","CGA-f63v-ppw7-m329","CGA-fm4p-c8hw-cfvg","CGA-g6m2-9cm4-4fw2","CGA-g6pw-324q-v4p5","CGA-g6r7-53cg-8ghr","CGA-gqqm-vpxh-fxvm","CGA-h3g4-9x8m-923q","CGA-h5r6-943r-5637","CGA-hm8h-m79j-gmjj","CGA-j33m-h764-3339","CGA-jghw-8x77-jx3h","CGA-jv77-8hrh-8h7p","CGA-m58r-p288-6ghh","CGA-m89p-48cp-r97w","CGA-m8hm-33vg-37r4","CGA-mg3p-pv68-256f","CGA-mjw9-qvcm-8xqr","CGA-p45p-hrv4-p5hw","CGA-p95g-g3gc-5m4c","CGA-pr79-pqrp-7gv9","CGA-prw3-p9gj-m53m","CGA-pw5v-5wm2-89jp","CGA-q4cx-3fvv-j79r","CGA-q7cv-rgw9-7qmf","CGA-qgh9-m835-wvjf","CGA-qpmp-r7p8-f3fr","CGA-qqp3-8p23-p3j6","CGA-r2vv-42qg-qj2q","CGA-rcpw-q97j-mc4q","CGA-rgg5-6274-j5jg","CGA-v7h9-r5v4-vm4j","CGA-vq2q-rfrf-662m","CGA-w89p-wq8q-fxxp","CGA-w99q-5cvp-8rhw","CGA-wrpp-2wqm-v726","CGA-x3c9-35xh-7j4f","CGA-xh4f-5q42-jphq","CGA-xmjf-cv85-mj26","CGA-xxq5-4xjx-vq54"],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the __proto__ property, an attacker can manipulate the prototype chain of JavaScript objects, leading to denial of service or arbitrary code execution. This issue arises from insufficient validation of attribute namespace removal operations, allowing unintended modification of critical object prototypes. The vulnerability remains unaddressed in the latest available version.","dates":{"published":"2025-09-24T00:00:00.000Z","modified":"2025-09-25T18:25:21.651Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00356,"percentile":0.28035,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0.0029999999999999645,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00353},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00356,"percentile":0.28035}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00353,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00356,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00356,"percentile":0.28035}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-1321","name":"Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')","description":"The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.","type":"weakness","status":"Incomplete","abstraction":"Variant","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1321.html"}],"affected":[{"vendor":"chainguard","product":"arangodb-3.11","name":"arangodb-3.11","label":"arangodb-3.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/arangodb-3.11","purlType":"apk","versions":[{"text":"< 3.11.14.5-r32","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.11.14.5-r32","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.2","name":"commercial-gitlab-rails-ee-19.2","label":"commercial-gitlab-rails-ee-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.1","name":"commercial-gitlab-rails-ee-fips-19.1","label":"commercial-gitlab-rails-ee-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.2","name":"commercial-gitlab-rails-ee-fips-19.2","label":"commercial-gitlab-rails-ee-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"foxx-cli","name":"foxx-cli","label":"foxx-cli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/foxx-cli","purlType":"apk","versions":[{"text":"< 2.1.1-r2","noFixRecorded":false,"fixedIn":null},{"text":"< 2.1.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.1-r2 | < 2.1.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.2","name":"gitlab-rails-ce-19.2","label":"gitlab-rails-ce-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.2","purlType":"apk","versions":[{"text":"< 19.2.6-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.6-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.3","name":"gitlab-rails-ce-19.3","label":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3","purlType":"apk","versions":[{"text":"< 19.3.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.12-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.12-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.9-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.9-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.8-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.8-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.2","name":"gitlab-rails-ce-fips-19.2","label":"gitlab-rails-ce-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.6-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.6-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.3","name":"gitlab-rails-ce-fips-19.3","label":"gitlab-rails-ce-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.1-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.1-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-image-renderer","name":"grafana-image-renderer","label":"grafana-image-renderer","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-image-renderer","purlType":"apk","versions":[{"text":"< 4.1.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.5-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-alerting-dashboards-plugin","name":"opensearch-dashboards-2-alerting-dashboards-plugin","label":"opensearch-dashboards-2-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.4-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","name":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","label":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.4-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-alerting-dashboards-plugin","name":"opensearch-dashboards-3-alerting-dashboards-plugin","label":"opensearch-dashboards-3-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.4.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.5.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.4.0-r0 | < 3.5.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-alerting-dashboards-plugin","name":"opensearch-dashboards-3-fips-alerting-dashboards-plugin","label":"opensearch-dashboards-3-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.5.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.4.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r0 | < 3.4.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"grafana-image-renderer","name":"grafana-image-renderer","label":"grafana-image-renderer","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/grafana-image-renderer","purlType":"apk","versions":[{"text":"< 4.1.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.5-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-alerting-dashboards-plugin","name":"opensearch-dashboards-3-alerting-dashboards-plugin","label":"opensearch-dashboards-3-alerting-dashboards-plugin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.4.0-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 3.5.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.4.0-r0 | < 3.5.0-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"node-min-document","name":"node-min-document","label":"node-min-document","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-min-document","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.19.2+~cs2.20.4-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.19.2+~cs2.20.4-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-min-document","name":"node-min-document","label":"node-min-document","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-min-document","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"Npm","product":"min-document","name":"min-document","label":"min-document","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/min-document","purlType":"npm","versions":[{"text":"< 2.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1","eol":null,"hubHref":null}],"affectedCount":39,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/Raynos/min-document/issues/54","label":"github.com/Raynos/min-document/issues/54","hostname":"github.com","tags":["REPORT","WEB"]},{"url":"https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57352","label":"github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57352","hostname":"github.com","tags":["REPORT","WEB"]},{"url":"https://ubuntu.com/security/CVE-2025-57352","label":"ubuntu.com/security/CVE-2025-57352","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-57352","label":"www.cve.org/CVERecord?id=CVE-2025-57352","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-57352","label":"security-tracker.debian.org/tracker/CVE-2025-57352","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-57352","label":"nvd.nist.gov/vuln/detail/CVE-2025-57352","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/Raynos/min-document/pull/55","label":"github.com/Raynos/min-document/pull/55","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/Raynos/min-document/commit/fe32e8da464cef622528725f647029a8fd7d95a6","label":"github.com/Raynos/min-document/commit/fe32e8da464cef622528725f647029a8fd7d95a6","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/Raynos/min-document","label":"github.com/Raynos/min-document","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-XHPP-FVWF-PRFF"]},"timeline":[{"kind":"published","date":"2025-09-24T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-09-25T18:25:21.651Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T18:47:59.095Z","stale":false,"partial":false}}