Prototype Pollution - Vulnerability

Related Threat Clusters

• Multiple Lodash Vulnerabilities Affecting Ubuntu Versions

  Multiple vulnerabilities in Lodash were discovered, affecting several Ubuntu LTS versions including 16.04, 18.04, 20.04, 22.04, 24.04, and 25.10. The vulnerabilities include a prototype pollution issue in the…

  2 articles · Updated June 9, 2026
• Fedora NextCloud Update Addresses JSON Tampering and DoS Vulnerabilities

  On June 5, 2026, Fedora released updates for NextCloud addressing two critical vulnerabilities: CVE-2026-42044 and CVE-2026-44167. CVE-2026-42044 involves JSON response tampering via prototype pollution in Axios, while…

  2 articles · Updated June 5, 2026
• Critical Remote Code Execution Vulnerability in Ubuntu Dottie

  A critical vulnerability in Dottie affects Ubuntu 22.04 LTS and 20.04 LTS, allowing remote code execution via specially crafted network traffic. Discovered by Yuhan Gao and Peng Zhou, the issue stems from prototype…

  2 articles · Updated February 12, 2026
• Fedora Updates Address js-yaml Prototype Pollution Vulnerability

  Fedora has released updates for the nodejs package to address a prototype pollution vulnerability in the js-yaml library, identified as CVE-2025-64718. This vulnerability affects multiple Fedora versions, specifically…

  2 articles · Updated March 17, 2026
• Fedora 43 pgAdmin4 Fixes Moderate Prototype Pollution Vulnerability CVE-2025-13465

  Fedora 43 has released a fix for a moderate prototype pollution vulnerability identified as CVE-2025-13465 affecting pgAdmin4, a popular open-source administration tool for PostgreSQL. The vulnerability was published on…

  6 articles · Updated February 5, 2026
• Critical Prototype Pollution Fix for yarnpkg in Fedora

  Fedora has released updates for yarnpkg to address a critical prototype pollution vulnerability identified as CVE-2025-13465, which was published on January 21, 2026. The updates include regenerating the vendor tarball…

  2 articles · Updated February 6, 2026
• Critical CVE-2025 Affects Fedora 43 openQA and os-autoinst

  CVE-2025-13465 was published on January 21, 2026, affecting the openQA and os-autoinst testing frameworks used in Fedora 43. These frameworks are essential for automating tests of operating system components and…

  3 articles · Updated February 4, 2026
• Axios CVE-2026-40175: Critical Vulnerability Misrepresented as Easily Exploitable

  A critical vulnerability in Axios, tracked as CVE-2026-40175, was reported with a CVSS score of 9.9, suggesting potential for remote code execution (RCE) and cloud infrastructure compromise. However, analysis reveals…

  6 articles · Updated April 14, 2026
• PCPcat Malware Compromises Over 59,000 Servers via React2Shell Exploit

  The PCPcat malware campaign has compromised more than 59,000 servers in under 48 hours by exploiting critical vulnerabilities in .js and React frameworks. It specifically targets vulnerabilities CVE-2025-29927 and…

  2 articles · Updated December 15, 2025
• Critical Vulnerability Discovered in expr-eval JavaScript Library

  A critical vulnerability has been identified in the expr-eval JavaScript library, which has over 800,000 weekly downloads on NPM. This vulnerability, tracked as CVE-2025-12735, allows for remote code execution through…

  2 articles · Updated November 10, 2025

Recent Intelligence Reports

• Snyk VulnBench JS 1.0: LLM Bug Repeatability — Snyk · June 29, 2026
• Snyk VulnBench JS 1.0: LLM Bug Repeatability — Snyk · June 29, 2026
• Ubuntu 26.04 LTS Lodash Critical Prototype Pollution Vuln USN-8411 — Linuxsecurity · June 9, 2026
• Fedora 44 NextCloud Update Denial of Service JSON Tampering 2026 — Linuxsecurity · June 5, 2026
• Fedora 43 nextcloud 33.0.4 Critical JSON Tampering DoS CVE-2026 — Linuxsecurity · June 5, 2026
• CC-4770 — Digital.Nhs.Uk · April 14, 2026
• Fedora 42 nodejs Package Update Includes Patch for js — Linuxsecurity · March 17, 2026
• Ubuntu 22.04 Dottie Critical Remote Code Execution USN-8041 — Linuxsecurity · February 12, 2026

Related Entities