Skip to content

Product

npm web3-utils vulnerabilities

1 published CVE affecting npm web3-utils, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest npm web3-utils CVEs

Newest publication first

  1. CVE-2024-21505 web3-utils Prototype Pollution vulnerability

    Published
    HighCVSS 7.5 EPSS 0.72%

    Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to insecure recursive merge. An attacker can manipulate an object's prototype, potentially leading to the alteration of the behavior of all ob...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.