CVE-2021-23433

CVE-2021-23433 affects the JavaScript package algoliasearch-helper, specifically versions before 3.6.2. The vulnerability arises from a Prototype Pollution risk in the merge path used by SearchParameters (src/SearchParameters/index.js) via the merge function in _parseNumbers, with no protection a...

CVE-2025-3193

The CVE-2025-3193 entry concerns algoliasearch-helper versions 2.0.0-rc1 through 3.11.2 (and earlier) with a Prototype Pollution in the _merge() function of merge.js. The underlying issue allows modification of constructor.prototype and, in an extreme edge-case where the resulting error is caught...