Bun vulnerabilities

Products

• Bun 2

Newest

• bun In Bun before 1.3.5, the default trusted dependencies list (aka trust allow list) can be spoofed... CVE-2026-24910 5.9 MediumJanuary 27, 2026
• bun Bun has an Application-level Prototype Pollution vulnerability in the runtime native API for Glo CVE-2024-21548 Fix available 7.7 HighDecember 18, 2024