{"id":"CVE-2021-25914","details":"Prototype pollution vulnerability in 'object-collider' versions 1.0.0 through 1.0.3 allows attacker to cause a denial of service and may lead to remote code execution.","aliases":["GHSA-85g2-29m8-qf2p"],"modified":"2026-07-08T21:27:08.569195Z","published":"2021-03-01T18:15:19.957Z","references":[{"type":"FIX","url":"https://github.com/FireBlinkLTD/object-collider/commit/321f75a7f8e7b3393e5b7dd6dd9ab26ede5906e5"},{"type":"EVIDENCE","url":"https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25914"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/fireblinkltd/object-collider","events":[{"introduced":"55541448704dab09cff2de88c527a1863a08334d"},{"last_affected":"9842609353337a9b1c41a8594d6773bd6cbca6b8"},{"fixed":"321f75a7f8e7b3393e5b7dd6dd9ab26ede5906e5"}],"database_specific":{"cpe":"cpe:2.3:a:fireblink:object-collider:*:*:*:*:*:node.js:*:*","extracted_events":[{"introduced":"1.0.0"},{"last_affected":"1.0.3"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["1.0.3","1.0.2","1.0.1","1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25914.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}