axios before 1.18.0 Prototype Pollution via bodyless methods

CVE-2026-67316

axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype h

历史摘要 · 未重新核验 · OSV.dev

axios before 1.18.0 Prototype Pollution via auth subfields

CVE-2026-67314

axios versions >=1.15.2 and <1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling (lib/a

历史摘要 · 未重新核验 · OSV.dev

Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass

CVE-2026-53609

## Summary `apos.util.set()` traverses dot-notation paths without sanitizing `__proto__`, allowing an authenticated e

历史摘要 · 未重新核验 · GitHub Advisory

Jodit has prototype pollution via Jodit.configure() / ConfigMerge

CVE-2026-54756

### Summary `Jodit.configure(options)` — and the internal `ConfigMerge` / `ConfigProto` helpers — merged user-supplied o

历史摘要 · 未重新核验 · GitHub Advisory

@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5, defaultsDeep() recursively merges user-supplied ob...

CVE-2026-54737

@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to

历史摘要 · 未重新核验 · NVD

@phun-ky/defaults-deep Has a Prototype Pollution issue via Unsafe Recursive Property Merging

CVE-2026-54737

### Impact A prototype pollution vulnerability exists in @phun-ky/defaults-deep prior to version 2.0.5. The library re

历史摘要 · 未重新核验 · GitHub Advisory

@phun-ky/defaults-deep Has a Prototype Pollution issue via Unsafe Recursive Property Merging

CVE-2026-54737

@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to

历史摘要 · 未重新核验 · OSV.dev

Style Dictionary - Prototype Pollution in convertTokenData utility function

CVE-2026-54639

### Impact Prototype pollution. A malicious user can create a token array `[{ key: '{__proto__.foo}', value: 'malicious'

历史摘要 · 未重新核验 · GitHub Advisory

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer...

CVE-2026-14893

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core

历史摘要 · 未重新核验 · GitHub Advisory

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution throug...

CVE-2026-14893

IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core

历史摘要 · 未重新核验 · NVD

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers ...

CVE-2026-66922

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-

历史摘要 · 未重新核验 · NVD

Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service

CVE-2026-66922

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-

历史摘要 · 未重新核验 · OSV.dev

Quasar: Prototype pollution in the extend() utility

### Summary `quasar@2.20.1`, the latest published version at the time of testing, appears to be vulnerable to prototype

历史摘要 · 未重新核验 · GitHub Advisory

find-my-way: DDoS with HTTP2

CVE-2026-47219

### Impact Remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The short version is that

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service

## Impact An authenticated user able to create or edit a workflow expression could abuse the expression engine's array-

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service

## Impact The Edit Fields (Set) node assigned output fields through a dot-notation path setter without restricting the

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

CVE-2026-59206

## Impact An authenticated user with the default `workflow:create` permission could pollute `Object.prototype` through a

历史摘要 · 未重新核验 · GitHub Advisory

@nevware21/ts-utils is a comprehensive TypeScript/JavaScript utility library. Prior to version 0.14.0, the _copyProps function in lib/src/object/copy.ts uses for...in to iterate...

CVE-2026-46681

@nevware21/ts-utils is a comprehensive TypeScript/JavaScript utility library. Prior to version 0.14.0, the _copyProps fu

历史摘要 · 未重新核验 · NVD

Versions of the package mongo-object before 3.0.3 are vulnerable to Prototype Pollution via the expandKey() function in util.js. An attacker can modify the JavaScript prototype ...

CVE-2026-16266

Versions of the package mongo-object before 3.0.3 are vulnerable to Prototype Pollution via the expandKey() function in

历史摘要 · 未重新核验 · NVD

Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning

## Summary Axios’ Node.js HTTP adapter can route requests through an attacker-controlled proxy when `Object.prototype.p

历史摘要 · 未重新核验 · GitHub Advisory