Threats tagged 'ghsa-95jq-xph2-cx9h'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	–	EPSS 0.6%	CVE-2025-8101Linkifyjs · Linkify Allows Prototype Pollution & HTML Attribute Injection (XSS) HighEPSS 0.6%2025-07-26GCVE DatabaseCVE-2025-8101 Linkify version 4.3.1 contains a prototype pollution vulnerability in its internal assign() helper function. This flaw allows remote attackers to inject event handlers via the unfiltered __proto__ property, leading to arbitrary JavaScript execution through stored or reflected cross-site scripting (XSS). The issue is resolved in version 4.3.2. EPSS 0.6%Vulnerability #ghsa-95jq-xph2-cx9h #npm	GCVE Database	2025-07-26

Page 1 of 1