Search Vulnerabilities

Tarkov Data Manager Authentication Bypass vulnerability

carboneio carbone Formatter input.js prototype pollution

apidoc-core - prototype pollution in api_group.js, api_param_title.js, api_use.js, and api_permission.js worker

tRPC has possible prototype pollution in `experimental_nextAppDirCaller`

Vuetify Prototype Pollution via Preset options

Elysia vulnerable to prototype pollution with multiple standalone schema validation

js-yaml has prototype pollution in merge (<<)

Rollbar.js Prototype Pollution Vulnerability in merge()

--disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom

sveltekit-superforms Prototype Pollution in `parseFormData` function of `formData.js`

Parse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIs

Versions of the package algoliasearch-helper from 2

Vulnerability of exposing object heap addresses in the Ark eTS module

Svelte devalue vulnerable to prototype pollution

@std/toml Prototype Pollution in Node.js and Browser

Spreecommerce < 0.60.2 Search Parameter RCE

content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCE

js-toml is vulnerable to Prototype Pollution

nyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoS

Linkify 4.3.1 - Prototype Pollution & HTML Attribute Injection (XSS)