Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/03/02 9:43 p.m.•23 views

`@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization

Summary A critical Prototype Pollution vulnerability exists in the RPC JSON deserializer of the @orpc/client package. The vulnerability allows unauthenticated, remote attackers to inject arbitrary properties into the global Object.prototype. Because this pollution persists for the lifetime of the...

9.8CVSS6.5AI score0.01252EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder