CVE-2026-69200

CVE-2026-69200 is a prototype pollution vulnerability in the node-opcua library (an OPC UA implementation for TypeScript/Node.js). The flaw exists in the internal fieldsToJson() method within packages/node-opcua-client/source/alarms_and_conditions/client_alarm.ts, which directly assigns unsanitiz...

EUVD-2026-80867

node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to node-opcua-client 2.145.0, the internal fieldsToJson method in packages/node-opcua-client/source/alarmsandconditions/clientalarm.ts directly assigns unsanitized field names and allows a proto.pollutedKey path to modify...

PT-2025-5760 · Unknown · Node-Opcua-Alarm-Condition

Name of the Vulnerable Software and Affected Versions: node-opcua-alarm-condition version 2.134.0 Description: A prototype pollution in the fieldsToJson function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For node-opcua-alarm-condition...

node-opcua 安全漏洞

node-opcua is a French Sterfive SAS open source implementation of an OPC UA stack written entirely in Typescript for NodeJS. A security vulnerability exists in node-opcua version v2.134.0, which stems from the fieldsToJson function containing a prototype contamination vulnerability...