Read the docs

Algolia

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Algolia records in CISA KEV

No Algolia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Algoliasearch-helper 2 records HIGH

Records

2 records

TI-2025-02792 CVE-2025-3193 · GHSA-529q-4j3p-7c5r

Prototype pollution in algoliasearch-helper

Priority HIGH 66

Versions of the package algoliasearch-helper from 2.0.0-rc1 and before 3.11.2 are vulnerable to Prototype Pollution in the _merge() function in merge.js, which allows constructor.prototype to be written even though doing…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00516 Published 2025-09-27 Partial fix · 3.11.2 CWE-1321
TI-2021-06125 CVE-2021-23433 · GHSA-vpf5-82c8-9v36

Prototype pollution in algoliasearch-helper

Priority MEDIUM 46

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters._parseNumbers without any protection against prototype…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01947 Published 2021-11-19 Fixed in 3.6.2 CWE-1321
Open these records in search →