Lucene search
+L

213 matches found

Github Security Blog
Github Security Blog
added 2026/07/24 4:14 p.m.7 views

Valibot: record() issue paths can make flatten() throw for inherited Object property names

Summary valibot 1.4.1 can throw a TypeError inside its flatten helper when validation issues contain attacker-controlled object keys such as toString, valueOf, or hasOwnProperty. The issue is reachable through normal record validation. record intentionally filters proto, prototype, and constructo...

6.9CVSS5.9AI score0.00524EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder