Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: elysiajs Component: Elysia Clear all filters
TI-2026-24417 CVE-2026-31865 · GHSA-8hq9-phh3-p2wp

Elysia Cookie Value Prototype Pollution

Priority LOW 34

Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation, and client-server communication.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00246 Published 2026-03-18 Fixed in 1.4.27 CWE-1321
TI-2026-23666 CVE-2026-30837 · GHSA-f45g-68q3-5w8x

Elysia has a string URL format redos

Priority MEDIUM 40

Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00545 Published 2026-03-10 Fixed in 1.4.26 CWE-1333