content-security-policy-parser (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package content-security-policy-parser, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (1)

• CVE-2025-55164: content-security-policy-parser parses content security policy directives. A prototype pollution vulnerability exists in versions 0.5.0 and…