Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Algolia Clear all filters
TI-2025-02792 CVE-2025-3193 · GHSA-529q-4j3p-7c5r

Prototype pollution in algoliasearch-helper

Priority HIGH 66

Versions of the package algoliasearch-helper from 2.0.0-rc1 and before 3.11.2 are vulnerable to Prototype Pollution in the _merge() function in merge.js, which allows constructor.prototype to be written even though doing…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00516 Published 2025-09-27 Partial fix · 3.11.2 CWE-1321
TI-2021-06125 CVE-2021-23433 · GHSA-vpf5-82c8-9v36

Prototype pollution in algoliasearch-helper

Priority MEDIUM 46

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters._parseNumbers without any protection against prototype…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01947 Published 2021-11-19 Fixed in 3.6.2 CWE-1321