98 matches found
CVE-2026-27212 Swiper has a Prototype Pollution Vulnerability
Swiper is a free and mobile touch slider with hardware accelerated transitions and native behavior. Versions 6.5.1 through 12.1.1 have a Prototype pollution vulnerability. The vulnerability resides in line 94 of shared/utils.mjs, where the indexOf function is used to check whether user provided...
CVE-2026-27212: Improperly Controlled Modification of Object Prototype Attributes
Swiper is a free and mobile touch slider with hardware accelerated transitions and native behavior. Versions 6.5.1 through 12.1.1 have a Prototype pollution vulnerability. The vulnerability resides in line 94 of shared/utils.mjs, where the indexOf function is used to check whether user provided...
Swiper 安全漏洞
Swiper is a free mobile touch slider developed by Vladimir Kharlampidi. It is designed for mobile websites, mobile web applications, and native mobile applications. Versions of Swiper from 6.5.1 to 12.1.1 contain security vulnerabilities. These vulnerabilities stem from prototype pollution, which...
Prototype Pollution
Overview org.webjars.npm:swiper is a Most modern mobile touch slider and framework with hardware accelerated transitions Affected versions of this package are vulnerable to Prototype Pollution via the extendDefaults function. An attacker can modify the prototype of global objects by supplying...
Prototype Pollution
Overview swiper is a Most modern mobile touch slider and framework with hardware accelerated transitions Affected versions of this package are vulnerable to Prototype Pollution via the extendDefaults function. An attacker can modify the prototype of global objects by supplying crafted input,...
10.18zy1 (1.0.0), 123hhkhihiuhibkbjgug5y (1.0.2) +3166 more potentially affected by CVE-2026-27212 via swiper (>=6.5.1, <=12.1.1)
swiper NPM version =6.5.1, =0.0.1, =0.0.1, =0.0.4, =0.1.6 - 20010708gaoyinuo 1.0.0 - 3.25-2 1.0.0 - 3.25-233 1.0.0 - 3.25zuoye 1.0.0 - 3.25zuoye2 1.0.0 - 5gliushun-home-test 0.1.0 and more Source cves: CVE-2026-27212 Source advisory: SNYK:JS-SWIPER-15322690...
10.18zy1 (1.0.0), 123hhkhihiuhibkbjgug5y (1.0.2) +3166 more potentially affected by CVE-2026-27212 via swiper (>=6.5.1, <=12.1.1)
swiper NPM version =6.5.1, =0.0.1, =0.0.1, =0.0.4, =0.1.6 - 20010708gaoyinuo 1.0.0 - 3.25-2 1.0.0 - 3.25-233 1.0.0 - 3.25zuoye 1.0.0 - 3.25zuoye2 1.0.0 - 5gliushun-home-test 0.1.0 and more Source cves: CVE-2026-27212 Source advisory: OSV:GHSA-HMX5-QPQ5-P643...
Prototype pollution in swiper
Summary A prototype pollution vulnerability exists in the the npm package swiper =6.5.1, -1; let obj = ; var maliciouspayload = '"proto":"polluted":"yes"'; console.log.polluted; swiper.default.extendDefaultsJSON.parsemaliciouspayload; console.log.polluted; // prints yes - indicating that the patc...
GHSA-HMX5-QPQ5-P643 Prototype pollution in swiper
Summary A prototype pollution vulnerability exists in the the npm package swiper =6.5.1, -1; let obj = ; var maliciouspayload = '"proto":"polluted":"yes"'; console.log.polluted; swiper.default.extendDefaultsJSON.parsemaliciouspayload; console.log.polluted; // prints yes - indicating that the patc...
PT-2026-21358
Name of the Vulnerable Software and Affected Versions Swiper versions 6.5.1 through 12.1.1 Description Swiper is a free and mobile touch slider with hardware accelerated transitions and native behavior. A prototype pollution issue exists in the shared/utils.mjs file, specifically at line 94, wher...
CVE-2024-39853
adolphdudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39000
adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
EUVD-2025-199314
Malicious code in @fishingbooker/react-swiper npm...
MAL-2025-191224 Malicious code in @fishingbooker/react-swiper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f57ab28c32fa764c92d001b6c970f064bf1c5544959b2c677d8ce8f26d3bd5 The package @fishingbooker/react-swiper was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199233
Malicious code in ngx-useful-swiper-prosenjit npm...
Malicious code in ngx-useful-swiper-prosenjit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285834c76af1324a80d9544c32d23970dce50b43ab7fb2d3ada984f7537ff5d2 The package ngx-useful-swiper-prosenjit was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191129 Malicious code in ngx-useful-swiper-prosenjit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285834c76af1324a80d9544c32d23970dce50b43ab7fb2d3ada984f7537ff5d2 The package ngx-useful-swiper-prosenjit was found to contain malicious code. Source: ghsa-malware...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...