CVE-2026-27212

CVE-2026-27212 affects the npm package swiper (versions 6.5.1 through 12.1.1). The vulnerability is a prototype pollution in shared/utils.mjs where indexOf() checks input against forbidden strings; crafted input can pollute Object.prototype via Array.prototype, despite a prior mitigation. This ca...

CVE-2021-23370

CVE-2021-23370 affects the npm package swiper prior to 6.5.1. The root cause is prototype pollution in swiper’s code, with the impact described as vulnerable to prototype pollution. Remediation: upgrade to swiper 6.5.1 or later.

CVE-2024-39853

The adolph_dudu ratio-swiper version 0.0.2 is vulnerable to prototype pollution due to the parse function. Attackers can exploit this by passing crafted arguments with the proto property (or through functions like extendDefaults ) to inject arbitrary properties. This vulnerability allows for arbi...

CVE-2024-39000

The ratio-swiper library (v0.0.2) by adolph_dudu is vulnerable to a prototype pollution flaw within the parse function. This vulnerability allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . As a temporary workaround, i...

CVE-2024-38997

The adolph_dudu ratio-swiper library, specifically version v0.0.2 , is vulnerable to prototype pollution through the extendDefaults function. This flaw allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . As a temporary ...