Velocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and earlier, a prototype pollution vulnerability was discovered in velocityjs. This issue occurs during the processing of #set directives in Velocity templates. If an application renders a template controlled by an attacker, it is possible to modify Object.prototype, potentially leading to Denial of Service (DoS) or Remote Code Execution (RCE) depending on the server environment.
Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arguments) entering shell.openExternal after specific user behavior leading to "1-click" command execution.
Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() and jsondiffpatch/formatters/jsonpatch.patch() APIs. An attacker can perform prototype pollution by supplying crafted delta or JSON Patch documents, as attacker-controlled property names and path segments are used to traverse and modify objects without restricting access to special properties like __proto__ or constructor.prototype, allowing modification of Object.prototype.
vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and then forwards sandbox writes into the underlying host objects with otherReflectSet() and otherReflectDefineProperty(), which lets attacker-controlled JavaScript running in a default VM or inherited NodeVM mutate shared host Object.prototype, Array.prototype, and Function.prototype from inside the sandbox This vulnerability is fixed in 3.11.0.
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated message constructors copied enumerable properties from a provided properties object without filtering the __proto__ key. If an application constructed a message from an attacker-controlled plain object, an own enumerable __proto__ property could alter the prototype of that individual message instance. This vulnerability is fixed in 7.5.6 and 8.0.2.
protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs allowed certain schema option paths to traverse through inherited object properties while applying options. A crafted protobuf schema or JSON descriptor could cause option handling to write to properties on global JavaScript constructors, corrupting process-wide built-in functionality. This vulnerability is fixed in 7.5.6 and 8.0.2.
multiparty versions 4.2.3 and earlier contain a vulnerability where sending a multipart/form-data request with a field name matching an inherited Object.prototype property causes an uncaught exception. This exception crashes the process, resulting in a denial of service. The issue is fixed in version 4.3.0.
18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Versions prior to 3.9.3 allow an unauthenticated HTTP client to pollute Object.prototype in the Node.js process hosting the middleware, via two unvalidated entry points that reach internal object-key writes: getResourcesHandler and missingKeyHandler. This can break authorisation checks (if (user.isAdmin) returning true for any user), cause type-confusion DoS, and depending on downstream code it can be chained into RCE.
Axios versions from 1.0.0 up to but not including 1.15.2 contain a prototype pollution vulnerability in the HTTP adapter. This flaw allows polluted properties on Object.prototype to be used by Axios in outbound HTTP requests, potentially leading to information disclosure and manipulation of network communications. The vulnerability requires another component in the same environment to have already polluted Object.prototype. The issue is fixed in version 1.15.2.
CVE-2026-42232 is a critical prototype pollution vulnerability in the open source workflow automation platform n8n. It affects versions prior to 1.123.32, 2.17.4, and 2.18.1. An authenticated user with permission to create or modify workflows can exploit the XML Node to achieve global prototype pollution, which can lead to remote code execution when combined with other nodes. This vulnerability has been patched in versions 1.
A critical prototype pollution vulnerability (CWE-1321) exists in the n8n workflow automation platform prior to versions 1.123.32, 2.17.4, and 2.18.1. The flaw arises from the xml2js library used in n8n's webhook handler, allowing an authenticated user with workflow modification permissions to craft an XML payload that pollutes the JavaScript object prototype. By chaining this pollution with the Git node's SSH operations, remote code execution on the n8n host is possible. This vulnerability has been patched in the specified versions.
Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a prototype pollution vulnerability in the mailbox store module allows attackers to modify the behavior of all JavaScript objects by injecting malicious properties into Object.prototype. The vulnerability exists in the _applyUpdate() and _updateRecord() functions which use Object.assign() to merge user-controlled data without filtering dangerous keys like __proto__, constructor, or prototype. This issue has been patched in version 1.69.3.
Axios versions prior to 1.15.1 and 0.31.1 are vulnerable to a Prototype Pollution attack that allows manipulation of the Object.prototype.validateStatus property. This causes all HTTP error responses (e.g., 401, 403, 500) to be treated as successful responses, bypassing application-level authentication and error handling. The vulnerability is fixed in versions 1.15.1 and 0.31.1.
Axios versions from 1.0.0 up to but not including 1.15.2 are vulnerable to a Prototype Pollution "Gadget" attack. This flaw allows an attacker to escalate Object.prototype pollution into selective, invisible modifications of JSON API responses, potentially enabling privilege escalation, balance manipulation, and authorization bypass. The vulnerability arises because the default transformResponse function calls JSON.parse with a parseReviver property that can be polluted and invoked on every key-value pair in JSON responses. This issue is fixed in version 1.15.2.
Axios versions prior to 1.15.1 and 0.31.1 contain a prototype pollution vulnerability in the HTTP adapter that allows attackers to inject arbitrary HTTP headers into outgoing requests. This occurs because Axios misidentifies plain object payloads as FormData instances when Object.prototype is polluted with certain functions, leading to execution of attacker-controlled header injection. The vulnerability is fixed in versions 1.15.1 and 0.31.1.
Axios versions prior to 1.15.1 and 0.31.1 are vulnerable to prototype pollution when Object.prototype is polluted by another co-dependency. This vulnerability allows an attacker to intercept and modify JSON responses or hijack HTTP transport, exposing sensitive request data. The flaw is fixed in versions 1.15.1 and 0.31.1.
DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions 3.0.1 through 3.3.3 are vulnerable to a prototype pollution-based XSS bypass. When an application uses `DOMPurify.sanitize()` with the default configuration (no `CUSTOM_ELEMENT_HANDLING` option), a prior prototype pollution gadget can inject permissive `tagNameCheck` and `attributeNameCheck` regex values into `Object.prototype`, causing DOMPurify to allow arbitrary custom elements with arbitrary attributes — including event handlers — through sanitization. Version 3.4.0 fixes the issue.
Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary file system read in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.