GHSA-M929-RG27-GJ99 Duplicate Advisory: rollbar vulnerable to prototype pollution

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r8c2-2qwq-94p6. This link is maintained to preserve external references. Original Description rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package include...

CVE-2025-57325

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. A Prototype Pollution vulnerability in the utility.set function of...

CVE-2025-57325

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. A Prototype Pollution vulnerability in the utility.set function of...

CVE-2025-57325

Summary: Rollbar v2.26.4 and earlier are vulnerable to a Prototype Pollution in the internal function utility.set, allowing an attacker to inject properties into Object.prototype via crafted input, potentially causing a DoS. A fix is available in versions 2.26.5 and 3.0.0-beta5 or newer. The CVE ...

CVE-2025-57325

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. A Prototype Pollution vulnerability in the utility.set function of...

CVE-2025-57325

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. A Prototype Pollution vulnerability in the utility.set function of...

PT-2025-39334

Name of the Vulnerable Software and Affected Versions rollbar versions prior to 2.26.4 Description rollbar is a package used for tracking and debugging errors in JavaScript applications. A flaw exists in the utility.set function that allows attackers to inject properties onto Object.prototype by...

CVE-2025-32250

Cross-Site Request Forgery CSRF vulnerability in rollbar Rollbar rollbar allows Cross Site Request Forgery.This issue affects Rollbar: from n/a through = 2.7.1...

CVE-2025-32250

Cross-Site Request Forgery CSRF vulnerability in rollbar Rollbar rollbar allows Cross Site Request Forgery.This issue affects Rollbar: from n/a through = 2.7.1...

CVE-2025-32250 WordPress Rollbar plugin <= 2.7.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in rollbar Rollbar rollbar allows Cross Site Request Forgery.This issue affects Rollbar: from n/a through = 2.7.1...

CVE-2025-32250 WordPress Rollbar plugin <= 2.7.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in rollbar Rollbar rollbar allows Cross Site Request Forgery.This issue affects Rollbar: from n/a through = 2.7.1...

CVE-2025-32250

The CVE-2025-32250 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the Rollbar WordPress plugin. Affected software is the Rollbar plugin for WordPress, with impact stated as the vulnerability exists from version n/a up to and including 2.7.1. The provided metrics indicate a C...

WordPress Rollbar plugin <= 2.7.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by SOPROBRO in WordPress Plugin Rollbar versions = 2.7.1...

WordPress plugin Rollbar 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-15006 · Rollbar · Rollbar

Name of the Vulnerable Software and Affected Versions: Rollbar versions n/a through 2.7.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions prior to 2.7.1, update t...

Malicious code in rollbar-blanket (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7013 Malicious code in rollbar-blanket (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in logstash_2-output-rollbar (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6982 Malicious code in logstash_2-output-rollbar (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Man In The Middle (MitM)

rollbar is vulnerable to man in the middle MitM attacks. The library does not validate if the endpoint it's communicating with has a valid SSL certificate or not, potentially allowing a malicious user to to conduct a man in the middle attack...