CRITICAL
victorteokw
CVE published 2026-05-07
CVE-2025-63704
CVE-2025-63704 is a critical vulnerability in the NPM package query-parser-string 1.0.0, which is susceptible to Prototype Pollution due to improper sanitization of user-supplied query parameters. This vulnerability can lead to significant security risks, including potential data breaches and system compromise. Affected product deployments should be identified in managed environments, and owners should be [truncated]