CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
473 vulnerabilities with CWE-1321
CVE-2025-57330
HIGH
Web3js Web3-core-subscriptions < 1.10.4 - Prototype Pollution
CVSS 7.5
CVE-2025-57354
MEDIUM
NPM Counterpart - Prototype Pollution
CVSS 6.5
CVE-2025-57353
MEDIUM
Messageformat Runtime < 3.0.2 - Prototype Pollution
CVSS 5.3
CVE-2025-57352
MEDIUM
NPM Min-document < 2.19.1 - Prototype Pollution
CVSS 5.3
CVE-2025-57350
HIGH
Keyangxiang Csvtojson < 2.0.10 - Prototype Pollution
CVSS 8.6
CVE-2025-58280
HIGH
Huawei Harmonyos - Prototype Pollution
CVSS 8.4
CVE-2025-57820
HIGH
NPM Devalue < 5.3.2 - Prototype Pollution
CVE-2025-55195
HIGH
@std/toml <1.0.9 - Prototype Pollution
CVSS 7.3
CVE-2025-55164
HIGH
content-security-policy-parser <0.6.0 - Prototype Pollution
CVE-2025-54803
HIGH
Sunnyadn Js-toml < 1.0.2 - Prototype Pollution
CVSS 7.5
CVE-2025-34146
HIGH
Nyariv Sandboxjs < 0.8.24 - Prototype Pollution
CVE-2025-8101
HIGH
NPM Linkifyjs < 4.3.2 - Prototype Pollution
CVE-2025-53626
MEDIUM
pdfme <5.4.0 - RCE
CVSS 6.1
CVE-2025-49223
CRITICAL
Naver Billboard.js < 3.15.1 - Prototype Pollution
CVSS 9.8
CVE-2025-48054
MEDIUM
NPM Radashi < 12.5.1 - Prototype Pollution
CVE-2025-5150
MEDIUM
Linuxfoundation Docarray < 0.40.1 - Code Injection
CVSS 6.3
CVE-2025-26621
HIGH
Citeum Opencti < 6.5.2 - Code Injection
CVSS 7.6
CVE-2025-25014
CRITICAL
Kibana - Code Injection
CVSS 9.1
CVE-2025-3982
MEDIUM
nortikin Sverchok 1.3.0 - Prototype Pollution
CVSS 4.3
CVE-2025-32014
MEDIUM
NPM Estree-util-value-to-estree < 3.3.3 - Prototype Pollution
CVE-2025-31475
MEDIUM
Amauri Tarteaucitronjs < 1.20.1 - Prototype Pollution
CVSS 5.5
CVE-2025-3197
HIGH
NPM Expand-object - Prototype Pollution
CVSS 7.3
CVE-2025-25977
CRITICAL
Canvg < 3.0.11 - Prototype Pollution
CVSS 9.8
CVE-2025-27597
HIGH
Intlify Message-resolver < 9.1.11 - Prototype Pollution
CVE-2025-25015
CRITICAL
Kibana <8.17.1 - RCE
CVSS 9.9
Details
Vulnerabilities
473