Skip to content

Product

npm web3-core-subscriptions vulnerabilities

1 published CVE affecting npm web3-core-subscriptions, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest npm web3-core-subscriptions CVEs

Newest publication first

  1. CVE-2025-57330 web3-core-subscriptions has a Prototype Pollution vulnerability

    Published
    HighCVSS 7.5 EPSS 0.39%

    The web3-core-subscriptions is a package designed to manages web3 subscriptions. A Prototype Pollution vulnerability in the attachToObject function of web3-core-subscriptions version 1.10.4 and before allows attackers to inject properties on Object.prototype via supplying a craft...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.