HarborGuard / CVE
Back to search
HIGHCVE-2026-25754Published Modified CNA GitHub_M

CVE-2026-25754: AdonisJS multipart body parsing has Prototype Pollution issue

AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a prototype pollution vulnerability in AdonisJS multipart form-data parsing may allow a remote attacker to manipulate object prototypes at runtime. This issue has been patched in versions 10.1.3 and 11.0.0-next.9.

Metrics

CVSS v3.1
7.2
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • adonisjs / core
    < 10.1.3 · < 11.0.0-next.9
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
References