CVE-2025-57325

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications

High · published September 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
32.1
In the wild
Unconfirmed
What it is

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. A Prototype Pollution vulnerability in the utility.set function of rollbar v2.26.4 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00392 · 32.1th percentile
Published
2025-09-24T00:00Z
EPSS history
Timeline
  • 24 SEP 00:00Z
    rollbar is a package designed to effortlessly track and debug errors in JavaScript applications
    cvelistv5