Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2025/12/16 7:37 p.m.10 views

tRPC has possible prototype pollution in `experimental_nextAppDirCaller`

Note that this vulnerability is only present when using experimentalcaller / experimentalnextAppDirCaller. Summary A Prototype Pollution vulnerability exists in @trpc/server's formDataToObject function, which is used by the Next.js App Router adapter. An attacker can pollute Object.prototype by...

8.5CVSS7AI score0.00338EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder