CVE-2026-25754
AdonisJS multipart body parsing has Prototype Pollution issue
Résumé
AdonisJS multipart body parsing has Prototype Pollution issue
Description d'origine
La description telle que publiée par la source (souvent en anglais).
AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a prototype pollution vulnerability in AdonisJS multipart form-data parsing may allow a remote attacker to manipulate object prototypes at runtime. This issue has been patched in versions 10.1.3 and 11.0.0-next.9.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com