CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

msgpack5: Partial options disable prototype protection

Payload: Remote Code Execution through first-register

Payload Form Builder has an RCE issue

Payload: Prototype pollution in Payload Import Export plugin

joi messages compilation allows prototype replacement through __proto__ error codes

GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`

Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution

Tinypool: Prototype Pollution Gadget to RCE in run() options

stream-json has a prototype pollution issue: Assembler writes this.current[this.key] on plain objects

vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix

@orpc/zod: Prototype injection in smart coercion

Prototype Pollution via parse() in NodeJS flatted

locutus is vulnerable to Prototype Pollution

Hono vulnerable to Prototype Pollution possible through __proto__ key allowed in parseBody({ dot: true })

Duplicate Advisory: Hono vulnerable to Prototype Pollution possible through __proto__ key allowed in parseBody({ dot: true })

devalue: Malformed null-prototype object keys bypass __proto__ rejection via property-key coercion

piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env

Axios: Header Injection via Inherited headers After Minimal Interceptor

Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders

Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection

Axios: Prototype pollution gadget in fetch adapter can alter outbound requests

Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method

Axios: Prototype Pollution Gadget in axios toFormData Options

scim-patch: Mutation of Inherited Built-in Method Objects

CyberChef: Prototype pollution in Series Chart operation