@arcblock/gatsby-theme-docs (>=5.7.0, <=7.34.5), @changeinc/components (>=1.0.4, <=1.0.20) +87 more potentially affected by CVE-2025-3193 via algoliasearch-helper (>=2.1.2, <=2.28.1)

algoliasearch-helper NPM version =2.1.2, =5.7.0, =1.0.4, =1.0.4, =1.0.0, =2.2.1-custom, =0.0.7, =0.1.2, =0.1.4, =0.2.3, =0.2.1, =0.0.1, =2.0.0, =0.0.0, =1.9.0, =1.0.0, =1.4.2 and more Source cves: CVE-2025-3193 Source advisory: OSV:GHSA-529Q-4J3P-7C5R...

CVE-2025-3193

creationtimestamp| type| source ---|---|--- 2025-09-27 05:53:40+00:00| seen| Telegram/0HSSyxCpkFpeLmZywltR0PnyhYVaAOPjqGUBQnOK2lqwBWs...

CVE-2025-3193

Versions of the package algoliasearch-helper from 2.0.0-rc1 and before 3.11.2 are vulnerable to Prototype Pollution in the merge function in merge.js, which allows constructor.prototype to be written even though doing so throws an error. In the "extreme edge-case" that the resulting error is...

@arcblock/gatsby-theme-docs (>=5.7.0, <=7.34.5), @changeinc/components (>=1.0.4, <=1.0.20) +87 more potentially affected by CVE-2021-23433 +1 more via algoliasearch-helper (>=2.1.2, <=2.28.1)

algoliasearch-helper NPM version =2.1.2, =5.7.0, =1.0.4, =1.0.4, =1.0.0, =2.2.1-custom, =0.0.7, =0.1.2, =0.1.4, =0.2.3, =0.2.1, =0.0.1, =2.0.0, =0.0.0, =1.9.0, =1.0.0, =1.4.2 and more Source cves: CVE-2021-23433, CVE-2025-3193 Source advisory: SNYK:JS-ALGOLIASEARCHHELPER-3318396...