CWE-1321: Prototype Pollution
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
Also known as Improperly Controlled Modification of Object Prototype Attributes.
A kind of CWE-915 Mass Assignment.
From the CWE List. © The MITRE Corporation.
Newest
- sveltejs devalue Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output 2.1 Low
- sveltejs devalue Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflatten 6.3 Medium
- sveltejs devalue Sveltejs devalue before 5.9.3 __proto__ Rejection Bypass via Property-Key Coercion 6.3 Medium
- progress software kendo ui for vue Prototype Pollution in Progress Software Kendo UI for Vue 4.1 Medium
- progress software kendoreact Prototype Pollution in Progress Software KendoReact 4.1 Medium
- progress software kendo ui for angular Prototype Pollution in Progress Software Kendo UI for Angular 4.1 Medium
- jgraph drawio draw.io: Prototype pollution in GraphML (mxGraphMlCodec) 6.1 Medium
- parse-community parse-server Parse Server before 8.6.113 and 9.10.6-alpha.5 Prototype Pollution via Dot Notation Key 6.0 Medium
- i18next i18next: Shared built-in corruption through inherited-key deepExtend recursion 5.9 Medium
- parse-community parse-server Parse Server 9.0.0 before 9.10.5-alpha.9 Prototype Pollution Denial of Service 6.0 Medium
- digitalbazaar forge Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie 4.8 Medium
- n8n-io n8n n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction 7.1 High
- n8n-io n8n n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables 8.7 High
- highcharts Highcharts: dotted series.keys paths write to Object.prototype 7.2 High
- highcharts Highcharts: series column construction writes to Object.prototype 7.2 High
- @highcharts dashboards, highcharts +1 more Highcharts Dashboards: editableOptions.propertyPath writes to Object.prototype 6.9 Medium
- @highcharts dashboards, highcharts, @highcharts grid-pro +2 more Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column. 6.9 Medium
- highcharts Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype` 5.3 Medium
- sebhildebrandt systeminformation systeminformation: Prototype pollution in `networkStats()` via the interface name 6.5 Medium
- ardatan graphql-tools GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments 8.4 High
- binarymuse toml-node toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype 8.8 High
- vaadin @vaadin/charts, vaadin, vaadin vaadin-charts-flow +1 more +3 more Multiple Vulnerabilities in the Highcharts Library Bundled with Vaadin Charts 8.4 High
- @apostrophecms db-connect, apostrophecms apostrophe +1 more ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service 7.1 High
- apostrophecms apostrophe ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users 6.1 Medium
- airjp73 @rvf/set-get @rvf/set-get before 7.0.4 Prototype Pollution via setPath Inherited Methods 8.7 High
- stalniy @casl/ability @casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rulesToFields setByPath 6.0 Medium
- progress kendo ui, progress software kendo ui for jquery +1 more Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery 5.4 Medium
- n8n-io n8n n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge 6.0 Medium
- n8n-io n8n n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter 7.7 High
- vatesfr xen-orchestra Xen Orchestra before 6.9.0 Privilege Escalation via Prototype Pollution in vm.importFromEsxi 7.7 High
- perforce helix authentication service Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM... 9.3 Critical
- gin-quin fast-toml fast-toml through 0.5.4 Prototype Pollution via __proto__ Keys in Parsed TOML 8.8 High
- ntharim dot-access dot-access through 1.0.0 Prototype Pollution via set() path argument 8.8 High
- mcollina msgpack5 msgpack5: Partial options disable prototype protection 6.5 Medium
- ljharb traverse traverse: set() can write to built-in prototypes via an untrusted path 6.9 Medium
- mozilla node-convict CVE-2026-106550 7.5 High
- payloadcms payload Payload: Remote Code Execution through first-register 8.1 High
- payloadcms payload Payload: RCE in Payload Form Builder 10.0 Critical
- @payloadcms plugin-import-export, payloadcms payload +1 more Payload: Prototype pollution in Payload Import Export plugin 9.3 Critical
- ardatan graphql-tools GraphQL Tools has prototype pollution in well-established utility function `mergeDeep` 8.2 High
- middleapi orpc @orpc/zod: Prototype injection in smart coercion 6.5 Medium
- middleapi orpc @orpc/json-schema: Prototype injection in smart coercion 6.5 Medium
- tinylibs tinypool Tinypool: Prototype Pollution Gadget to RCE in run() options 9.5 Critical
- tinylibs tinypool Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution 9.5 Critical
- apache software foundation thrift Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers) 8.7 High
- apache software foundation thrift Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScript 6.3 Medium
- apache software foundation thrift Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely 8.7 High
- uhop stream-json stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objects 5.1 Medium
- piscinajs piscina piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env 9.2 Critical
- vaadin @vaadin/charts, @vaadin/component-base, vaadin +2 more +4 more Prototype Pollution in Vaadin Charts and Component Base via Unfiltered Deep Merge 6.3 Medium
- Show olderLoading…