Skip to content

Product

blitz-js superjson vulnerabilities

1 published CVE affecting blitz-js superjson, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest blitz-js superjson CVEs

Newest publication first

  1. CVE-2022-23631 Prototype Pollution leading to Remote Code Execution in superjson

    Published
    CriticalCVSS 9.8 EPSS 2.7%

    superjson is a program to allow JavaScript expressions to be serialized to a superset of JSON. In versions prior to 1.8.1 superjson allows input to run arbitrary code on any server using superjson input without prior authentication or knowledge. The only requirement is that the s...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.