134377 matches found
EUVD-2026-90979
KaTeX: Existing prototype pollution can bypass trust restrictions...
NPM: KaTeX: Existing prototype pollution can bypass trust restrictions
NPM: KaTeX: Existing prototype pollution can bypass trust restrictions vulnerability discovered by ? in WordPress Npm katex versions = 0.11.0, 0.18.2...
GHSA-238P-PMPM-9MQ7 KaTeX: Existing prototype pollution can bypass trust restrictions
Impact KaTeX can act as a read-side prototype pollution gadget in applications where Object.prototype has already been polluted, or where an attacker can influence the prototype of the renderer options object. KaTeX does not enable said prototype pollution. This advisory applies when combining...
KaTeX: Existing prototype pollution can bypass trust restrictions
Impact KaTeX can act as a read-side prototype pollution gadget in applications where Object.prototype has already been polluted, or where an attacker can influence the prototype of the renderer options object. KaTeX does not enable said prototype pollution. This advisory applies when combining...
CVE-2026-104852
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tools utils package's mergeDeep function follows inherited properties while recursively merging source objects and does not exclude proto, constructor, or prototype keys. An...
GHSA-7MX3-VVMW-HJMV GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`
Closed by https://github.com/ardatan/graphql-tools/pull/8423 Mitigated in Hive Gateway by https://github.com/graphql-hive/gateway/pull/2600 A client can alias fields to constructor, proto or prototype so that the response keys from two subgraphs collide on those names during result merging. Becau...
GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`
Closed by https://github.com/ardatan/graphql-tools/pull/8423 Mitigated in Hive Gateway by https://github.com/graphql-hive/gateway/pull/2600 A client can alias fields to constructor, proto or prototype so that the response keys from two subgraphs collide on those names during result merging. Becau...
CVE-2026-104852 GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tools utils package's mergeDeep function follows inherited properties while recursively merging source objects and does not exclude proto, constructor, or prototype keys. An...
EUVD-2026-92849
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tools utils package's mergeDeep function follows inherited properties while recursively merging source objects and does not exclude proto, constructor, or prototype keys. An...
CVE-2026-104852
The GraphQL Tools utils package is vulnerable to prototype pollution in the mergeDeep function prior to version 12.0.1 . The root cause is that the function follows inherited properties and fails to exclude __proto__, constructor, or prototype keys during recursive merging. An unauthenticated Gra...
CVE-2026-104852 GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tools utils package's mergeDeep function follows inherited properties while recursively merging source objects and does not exclude proto, constructor, or prototype keys. An...
CVE-2026-104852 GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tools utils package's mergeDeep function follows inherited properties while recursively merging source objects and does not exclude proto, constructor, or prototype keys. An...
EUVD-2026-91718
Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution...
Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution
tinypool passes worker options to new Worker by reading them off a plain object whose prototype is Object.prototype. Options the application did not set are resolved through the prototype chain and then passed explicitly to workerthreads.Worker. Node core ignores Worker options inherited from...
GHSA-5GMW-XHRV-C9V3 Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution
tinypool passes worker options to new Worker by reading them off a plain object whose prototype is Object.prototype. Options the application did not set are resolved through the prototype chain and then passed explicitly to workerthreads.Worker. Node core ignores Worker options inherited from...
NPM: Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution
NPM: Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution vulnerability discovered by ? in WordPress Npm tinypool versions = 2.1.0...
Tinypool: Prototype Pollution Gadget to RCE in run() options
tinypool is a fork of piscina and inherited the same prototype-pollution surface. When pool.runtask, options is called, the filename option is read from the provided options object. If that object does not have an own filename property, the lookup falls through to Object.prototype. An attacker wh...
NPM: Tinypool: Prototype Pollution Gadget to RCE in run() options
NPM: Tinypool: Prototype Pollution Gadget to RCE in run options vulnerability discovered by ? in WordPress Npm tinypool versions 2.1.2...
EUVD-2026-91719
Tinypool: Prototype Pollution Gadget to RCE in run options...
GHSA-85C8-PPGW-CCPR Tinypool: Prototype Pollution Gadget to RCE in run() options
tinypool is a fork of piscina and inherited the same prototype-pollution surface. When pool.runtask, options is called, the filename option is read from the provided options object. If that object does not have an own filename property, the lookup falls through to Object.prototype. An attacker wh...