ROOT-APP-NPM-CVE-2025-8101 CVE-2025-8101 in @rootio/linkifyjs - Patched by Root

Root has patched CVE-2025-8101 in the @rootio/linkifyjs package for Root:npm. Multiple fixed versions available...

SUSE CVE-2025-8101

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Linkify linkifyjs allows XSS Targeting HTML Attributes and Manipulating User-Controlled Variables.This issue affects Linkify: from 4.3.1 before 4.3.2...

@multiversx/sdk-dapp (>=5.0.0-alpha.8, <=5.1.4), @terradharitri/sdk-dapp (>=0.0.13, <=0.0.14) +1 more potentially affected by CVE-2025-8101 via linkifyjs (4.3.1)

linkifyjs NPM version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on linkifyjs and may be impacted: - @multiversx/sdk-dapp =5.0.0-alpha.8, =0.0.13, =0.0.14 - @xapp/question-answering-handler 2.5.21 Source cves: CVE-2025-8101 Source advisory:...

Prototype Pollution

Overview org.webjars.npm:linkifyjs is a Find URLs, email addresses, hashtags and @mentions in plain-text strings, then convert them into HTML links. Affected versions of this package are vulnerable to Prototype Pollution via the internal assign helper due to improper filtering of the proto...

@a.agiir/cinny (>=0.0.1, <=0.0.2), @a1tan/plugin-azure-openai (0.4.0) +799 more potentially affected by CVE-2025-8101 via linkifyjs (>=4.0.0-beta.4, <=4.3.1)

linkifyjs NPM version =4.0.0-beta.4, =0.0.1, =0.1.0, =0.1.0, =1.0.0, =0.1.8, =0.1.10 - @alithya-oss/backstage-plugin-rag-ai 1.2.7 - @alithya-oss/backstage-plugin-time-saver 1.4.5 and more Source cves: CVE-2025-8101 Source advisory: SNYK:JS-LINKIFYJS-11502189...

CVE-2025-8101

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Linkify linkifyjs allows XSS Targeting HTML Attributes and Manipulating User-Controlled Variables.This issue affects Linkify: from 4.3.1 before 4.3.2...