Lucene search
+L

6 matches found

OSV
OSV
added 2025/12/16 7:37 p.m.4 views

GHSA-43P4-M455-4F4J tRPC has possible prototype pollution in `experimental_nextAppDirCaller`

Note that this vulnerability is only present when using experimentalcaller / experimentalnextAppDirCaller. Summary A Prototype Pollution vulnerability exists in @trpc/server's formDataToObject function, which is used by the Next.js App Router adapter. An attacker can pollute Object.prototype by...

8.5CVSS6.9AI score0.00338EPSS
SaveExploits0References4
Rows per page
Query Builder