CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
539 vulnerabilities with CWE-1321
CVE-2025-3193
HIGH
algoliasearch-helper 2.0.0-rc1-3.11.1 - Prototype Pollution via _merge() Function
CVSS 7.5
CVE-2025-26278
HIGH
dref 0.1.2 - Denial of Service via Prototype Pollution in lib.set
CVSS 7.5
CVE-2025-57324
MEDIUM
parse < 5.3.0 - Prototype Pollution via SingleInstanceStateController.initializeState
CVSS 6.5
CVE-2025-57320
MEDIUM
json-schema-editor-visual < 1.1.1 - Prototype Pollution via setData and deleteData Functions
CVSS 6.5
CVE-2025-57318
HIGH
csvjson < 5.1.0 - Prototype Pollution via toCsv Function
CVSS 7.5
CVE-2025-57329
HIGH
web3-core-method < 1.10.4 - Prototype Pollution via attachToObject Function
CVSS 7.5
CVE-2025-57328
HIGH
toggle-array < 1.0.1 - Prototype Pollution via Enable/Disable Function
CVSS 7.5
CVE-2025-57327
HIGH
spmrc < 1.2.0 - Prototype Pollution via set and config Functions
CVSS 7.5
CVE-2025-57326
HIGH
sassdoc-extras < 2.5.1 - Prototype Pollution via byGroupAndType Function
CVSS 7.5
CVE-2025-57325
HIGH
rollbar < 2.26.4 - Prototype Pollution via utility.set Function
CVSS 7.5
CVE-2025-57323
HIGH
mpregular < 0.2.0 - Prototype Pollution via mp.addEventHandler
CVSS 7.5
CVE-2025-57321
CRITICAL
magix-combine-ex < 1.2.10 - Prototype Pollution via util-deps.addFileDepend
CVSS 9.8
CVE-2025-57351
MEDIUM
ts-fns < 13.0.7 - Prototype Pollution via Insufficient Key Validation in assign Function
CVSS 6.5
CVE-2025-57349
HIGH
messageformat < 2.3.0 - Prototype Pollution via Nested Message Key Paths
CVSS 7.5
CVE-2025-57348
MEDIUM
node-cube < 5.0.0 - Prototype Pollution via Improper Input Validation
CVSS 6.5
CVE-2025-57347
CRITICAL
dagre-d3-es < 7.0.11 - Prototype Pollution via 'bk' Module addConflict Function
CVSS 9.8
CVE-2025-57330
HIGH
web3-core-subscriptions < 1.10.4 - Prototype Pollution via attachToObject Function
CVSS 7.5
CVE-2025-57354
MEDIUM
counterpart < 0.18.6 - Prototype Pollution via Translation Key Processing
CVSS 6.5
CVE-2025-57353
MEDIUM
messageformat/runtime 3.0.1 - Prototype Pollution via Nested Message Key Processing
CVSS 5.3
CVE-2025-57352
MEDIUM
min-document < 2.19.1 - Prototype Pollution via removeAttributeNS Method
CVSS 5.3
CVE-2025-57350
HIGH
csvtojson < 2.0.10 - Prototype Pollution via Nested Header Parsing
CVSS 8.6
CVE-2025-58280
HIGH
HarmonyOS - Prototype Pollution in Ark eTS Module
CVSS 8.4
CVE-2025-57820
HIGH
devalue < 5.3.2 - Prototype Pollution via __proto__ Property Parsing
CVE-2025-55195
HIGH
@std/toml <1.0.9 - Prototype Pollution
CVSS 7.3
CVE-2025-55164
HIGH
content-security-policy-parser <0.6.0 - Prototype Pollution
Details
Vulnerabilities
539