PT-2025-138: Server‑Side Prototype Pollution in Foundry Virtual Tabletop

The vulnerability was identified in Foundry Virtual Tabletop, versions 13.350. The discovered vulnerability allows an attacker to inject arbitrary properties into the global object prototype of the Foundry Virtual Tabletop FVT server via unsafe recursive merge operations on user‑controlled input...

PT-2025-139: Stored XSS in Foundry Virtual Tabletop

The vulnerability was identified in Foundry Virtual Tabletop, versions 13.350. The discovered vulnerability allows an attacker to embed malicious JavaScript into the client‑side rendering pipeline of Foundry Virtual Tabletop FVT by exploiting unsafe handling of user‑controlled input. When the...