Read the docs

elysiajs

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

elysiajs records in CISA KEV

No elysiajs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records

TI-2026-23666 CVE-2026-30837 · GHSA-f45g-68q3-5w8x

Elysia has a string URL format redos

Priority MEDIUM 40

Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00545 Published 2026-03-10 Fixed in 1.4.26 CWE-1333
TI-2026-24417 CVE-2026-31865 · GHSA-8hq9-phh3-p2wp

Elysia Cookie Value Prototype Pollution

Priority LOW 34

Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation, and client-server communication.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00246 Published 2026-03-18 Fixed in 1.4.27 CWE-1321
Open these records in search →