EUVD-2023-2286

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Prototype pollution vulnerability in MrSwitch hello.js 1.18.6 allows remote code execution.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2021-26505	11 Aug 202318:22	–	circl
CNNVD	hellojs security vulnerability	11 Aug 202300:00	–	cnnvd
CVE	CVE-2021-26505	11 Aug 202300:00	–	cve
Cvelist	CVE-2021-26505	11 Aug 202300:00	–	cvelist
Github Security Blog	MrSwitch hello.js vulnerable to prototype pollution	11 Aug 202315:30	–	github
NVD	CVE-2021-26505	11 Aug 202314:15	–	nvd
OSV	GHSA-G3VF-47FV-8F3C MrSwitch hello.js vulnerable to prototype pollution	11 Aug 202315:30	–	osv
Prion	Code injection	11 Aug 202314:15	–	prion
RedhatCVE	CVE-2021-26505	22 May 202519:28	–	redhatcve
Veracode	Prototype Pollution	15 Aug 202304:35	–	veracode

[
  {
    "enisaIdVendor": [
      {
        "id": "cb4a96db-114c-3371-8350-4dd52e8be527",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "72ecb2ca-9189-3c56-a019-e587a5d6f7a9",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-26505
github	www.github.com/MrSwitch/hello.js/issues/634
github	www.github.com/MrSwitch/hello.js/commit/7ab50aeff2d41991f08d4ad6c0481125eea8f6b7
github	www.github.com/MrSwitch/hello.js

03 Oct 2025 20:07Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.8

EPSS0.01669

SSVC