https://www.thesmartscanner.com/vulnerability-list/grunt-karma-vulnerable-to-prototype-pollution
Grunt-karma vulnerable to prototype pollution - CVE-2022-37602 | SmartScanner | Web Security
Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js.
prototype pollutionweb securitygruntkarmavulnerable
https://www.vulncheck.com/advisories/sift-17.1.3-prototype-pollution-remote-code-execution-via-where
sift 17.1.3 Prototype Pollution Remote Code Execution via $where | Advisories | VulnCheck
remote code executionprototype pollutionsiftviaadvisories
https://www.vulncheck.com/advisories/sveltekit-before-2.69.1-prototype-pollution-via-file-input
SvelteKit before 2.69.1 Prototype Pollution via File Input | Advisories | VulnCheck
prototype pollutionsveltekitviafileinput
https://research.averlon.ai/vulnerability-intelligence/cve/CVE-2020-28442
CVE-2020-28442: Prototype Pollution in js-data - Averlon Vulnerability Intelligence
All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function....
prototype pollutioncvedatavulnerabilityintelligence
https://research.averlon.ai/vulnerability-intelligence/cve/CVE-2021-25941
CVE-2021-25941: Prototype Pollution in deep-override - Averlon Vulnerability Intelligence
Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code...
prototype pollutionin deepcveoverridevulnerability
https://www.thesmartscanner.com/vulnerability-list/axios-vulnerable-to-credential-theft-and-response-hijacking-via-prototype-pollution-gadget-in-config-merge
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in...
Axios versions before the fixed releases contain prototype-pollution gadgets in request config processing. If another vulnerability in the same Jav...
credential theftprototype pollutionaxiosvulnerableresponse
https://cvereports.com/reports/CVE-2026-2950
CVE-2026-2950: CVE-2026-2950: Prototype Pollution Bypass in Lodash via Array-Wrapped Path Segments...
Apr 1, 2026 - Daily high-severity CVE reports defined by AI. Comprehensive vulnerability analysis, attack flow diagrams, and remediation steps for security professionals.
prototype pollutioncvebypasslodashvia
https://research.averlon.ai/vulnerability-intelligence/cve/CVE-2020-7725
CVE-2020-7725: Prototype Pollution in worksmith - Averlon Vulnerability Intelligence
All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function....
prototype pollutioncvevulnerabilityintelligence
https://advisories.gitlab.com/npm/mysql2/CVE-2024-21512/
mysql2 vulnerable to Prototype Pollution | GitLab Advisory Database (GLAD)
CVE-2024-21512 mysql2 vulnerable to Prototype Pollution: Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user...
prototype pollutionvulnerablegitlabadvisorydatabase
Sponsored https://www.sexygamerz.com/enter.php?prg=1&id=robuta&t=best&ad_id=sexygamerz_315x300_default4.jpg
Sexy Gamerz - World's Best Gamer Dating
Tired of playing alone? Find a hot gamer girl on Sexy Gamerz.
https://hlukh.ch/security-warnings/id/GHSA-9FR6-4GFG-395G
Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method...
## Summary Axios default-instance requests that omit an explicit method can read an inherited `method` value from `Object.prototype`. If another vulnerability...
prototype pollutionin theaxiosgadgetdefault
https://mallory.ai/vulnerabilities/CVE-2026-34621
Prototype pollution leading to arbitrary code execution in Adobe Acrobat and Reader...
CVE-2026-34621 is a prototype pollution vulnerability affecting Adobe Acrobat DC and Acrobat Reader DC 26.001.21367 and earlier, and Acrobat 2024 24.001.30356…
arbitrary code executionprototype pollutionadobe acrobatleadingreader
https://security.snyk.io/vuln/SNYK-JS-PROTOBUFJS-16643319
Prototype Pollution in protobufjs | CVE-2026-44292 | Snyk
Medium severity (6.3) Prototype Pollution in protobufjs | CVE-2026-44292
prototype pollutioncvesnyk
https://research.averlon.ai/vulnerability-intelligence/cve/CVE-2022-37601
CVE-2022-37601: loader-utils: prototype pollution in function parseQuery in parseQuery.js - Averlon...
Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all...
prototype pollutioncveloaderutilsfunction
https://www.miggo.io/vulnerability-database/cve/CVE-2026-102992
CVE-2026-102992: Piscina Prototype Pollution RCE | Miggo
Piscina prototype pollution in ThreadPool.options grants RCE via inherited execArgv, executing arbitrary code in worker threads during their initialization.
prototype pollutioncvepiscinarcemiggo
https://advisories.gitlab.com/npm/mpregular/CVE-2025-57323/
mpregular vulnerable to prototype pollution | GitLab Advisory Database (GLAD)
CVE-2025-57323 mpregular vulnerable to prototype pollution: mpregular is a package that provides a small program development framework based on RegularJS. A...
prototype pollutionvulnerablegitlabadvisorydatabase
https://basefortify.eu/cve_reports/2026/10/cve-2026-103918.html
CVE-2026-103918 | oRPC ZodSmartCoercionPlugin Prototype Pollution Vulnerability
Oct 5, 2026 - oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.10, the @orpc/zod ZodSmartCoercionPlugin and...
prototype pollutioncvevulnerability
https://www.thesmartscanner.com/vulnerability-list/prototype-pollution-in-smart-extend
Prototype Pollution in smart-extend - Vulnerability | SmartScanner | Web Security
All versions of smart-extend are vulnerable to Prototype Pollution. The deep() function allows attackers to modify the prototype of Object causing ...
prototype pollutionweb securitysmartextendvulnerability
https://advisories.gitlab.com/npm/@sentry/browser/GHSA-593m-55hh-j8gv/
Sentry SDK Prototype Pollution gadget in JavaScript SDKs | GitLab Advisory Database (GLAD)
GHSA-593m-55hh-j8gv Sentry SDK Prototype Pollution gadget in JavaScript SDKs: In case a Prototype Pollution vulnerability is present in a user's application or...
prototype pollutionsentrysdkgadgetjavascript
Sponsored https://www.camsoda.ai/?id=robuta&ad_id=ai_300x250_02
Camsoda AI: AI Girlfriend App for Chatting, Photos, and Voice
Camsoda AI is the AI girlfriend app for real-time chat, photos, and voice. Pick from 200+ characters or create your own. Free to start.
https://devhub.checkmarx.com/cve-details/cx583f78df-0b4f/
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in...
Jan 9, 2023 - think-config prior to 1.1.3 is vulnerable to Prototype Pollution. The software receives input from an upstream component that specifies attributes that are to...
improperlycontrolledmodificationobjectprototype