PYSEC-2026-1308 docarray prototype pollution

A vulnerability was found in docarray up to 0.40.1. It has been rated as critical. Affected by this issue is the function getitem of the file /docarray/data/torchdataset.py of the component Web API. The manipulation leads to improperly controlled modification of object prototype attributes...

CVE-2025-5150 docarray Web API torch_dataset.py __getitem__ prototype pollution

A vulnerability was found in docarray up to 0.40.1. It has been rated as critical. Affected by this issue is the function getitem of the file /docarray/data/torchdataset.py of the component Web API. The manipulation leads to improperly controlled modification of object prototype attributes...

DocArray 安全漏洞

DocArray is a DocArray open source tool for representing, sending, storing, and searching multimodal data. A security vulnerability exists in DocArray 0.40.1 and earlier versions that stems from a prototype contamination issue in the file /docarray/data/torchdataset.py...