129836 matches found
CVE-2025-66456
Summary of the CVE-2025-66456 family (Elysia): Elysia (
CVE-2025-66456 Elysia vulnerable to prototype pollution with multiple standalone schema validation
Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication. Versions 1.4.0 through 1.4.16 contain a prototype pollution vulnerability in mergeDeep after merging results of two standard schema validations with the same key. Due to...
CVE-2025-66456 Elysia vulnerable to prototype pollution with multiple standalone schema validation
Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication. Versions 1.4.0 through 1.4.16 contain a prototype pollution vulnerability in mergeDeep after merging results of two standard schema validations with the same key. Due to...
CVE-2025-66456 Elysia vulnerable to prototype pollution with multiple standalone schema validation
Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication. Versions 1.4.0 through 1.4.16 contain a prototype pollution vulnerability in mergeDeep after merging results of two standard schema validations with the same key. Due to...
EUVD-2025-202180
Elysia vulnerable to prototype pollution with multiple standalone schema validation...
Elysia vulnerable to prototype pollution with multiple standalone schema validation
Prototype pollution vulnerability in mergeDeep after merging results of two standard schema validations with the same key. Due to the ordering of merging, there must be an any type that is set as a standalone guard, to allow for the proto prop to be merged. When combined with GHSA-8vch-m3f4-q8jf...
GHSA-HXJ9-33PP-J2CC Elysia vulnerable to prototype pollution with multiple standalone schema validation
Prototype pollution vulnerability in mergeDeep after merging results of two standard schema validations with the same key. Due to the ordering of merging, there must be an any type that is set as a standalone guard, to allow for the proto prop to be merged. When combined with GHSA-8vch-m3f4-q8jf...
Exploit for Deserialization of Untrusted Data in Facebook React
🔥 RSC RCE Exploit Toolkit !Versionhttps://img.shields.io...
Prototype Pollution zrender Dependency in Jira Software Data Center and Server
This is a vulnerability in a non-Atlassian Jira Software dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Prototype Pollution vulnerability known as CVE-2021-39227 was introduced in 10.3.0, and 11.0.0 of Jira Software Data...
PT-2025-49872
Name of the Vulnerable Software and Affected Versions Elysia versions 1.4.0 through 1.4.16 Description Elysia is a Typescript framework used for request validation, type inference, OpenAPI documentation, and client-server communication. The mergeDeep function is susceptible to a prototype polluti...
Linux Distros Unpatched Vulnerability : CVE-2025-13204
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance mod...
📄 React / Next.js Unauthenticated Remote Code Execution
A critical unauthenticated remote code execution vulnerability exists in React Server Components RSC Flight protocol. The vulnerability allows attackers to achieve prototype pollution during deserialization of RSC payloads by sending specially crafted multipart requests with proto, constructor, o...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Next.js RCE Exploit Tool 中文文档./README.zh-CN...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 / CVE-2025-66478 Vulnerability Replay Environme...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 React2Shell 취약점 실습 사용된 AI : Claude Opus 4.5...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Proof-of-Concept This repository contains a Pr...
Exploit for Prototype Pollution in Typeorm
CVE-2020-8158: TypeORM Prototype Pollution Vulnerability O...
Exploit for Deserialization of Untrusted Data in Facebook React
🔥 React2Shell Toolkit - CVE-2025-55182 & CVE-2025-66478 !R...