A vulnerability marked as critical has been reported in flash-oss graphql-upload-minimal 1.6.1. Affected by this vulnerability is the function
processRequest. Performing a manipulation of the argument operations.variables results in improperly controlled modification of object prototype attributes.
This vulnerability was named CVE-2025-65587. The attack may be initiated remotely. There is no available exploit.
