Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/02 9:43 p.m.15 views

`@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization

Summary A critical Prototype Pollution vulnerability exists in the RPC JSON deserializer of the @orpc/client package. The vulnerability allows unauthenticated, remote attackers to inject arbitrary properties into the global Object.prototype. Because this pollution persists for the lifetime of the...

9.8CVSS6.4AI score0.0091EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder