Search Vulnerabilities

1024bit extend-deep index.js prototype pollution

brikcss merge prototype pollution

Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`

defu: Prototype pollution via `__proto__` key in defaults argument

lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`

MikroORM has Prototype Pollution in Utils.merge

Locutus Prototype Pollution due to incomplete fix for CVE-2026-25521

Locutus has Prototype Pollution via __proto__ Key Injection in unserialize()

Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection

Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE

flatted: Prototype Pollution via parse()

Qwik has array method pollution in FormData processing, allowing type confusion and DoS

Parse Server's Cloud function dispatch crashes server via prototype chain traversal

Parse Server vulnerable to schema poisoning via prototype pollution in deep copy

Elysia Cookie Value Prototype Pollution

OpenClaw < 2026.2.21 - Prototype Pollution via Debug Override Path