Vulnerabilities

TI-2025-38757 CVE-2025-62517 · GHSA-xcg2-9pp4-j82x

Rollbar.js Prototype Pollution Vulnerability in merge()

LOW 27

Rollbar.js offers error tracking and logging from Javascript to Rollbar.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00393 Published 2025-10-23 Fixed in 2.26.5, 3.0.0-beta5 CWE-1321

TI-2025-35511 CVE-2025-57325 · GHSA-r8c2-2qwq-94p6

rollbar is a package designed to effortlessly track and debug errors in JavaScript…

LOW 39

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00392 Published 2025-09-24 Fixed in 2.26.5, 3.0.0-beta5 CWE-1321

TI-2025-23347 CVE-2025-32250 · GHSA-3qjh-r982-mhgp

WordPress Rollbar plugin <= 2.7.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in rollbar Rollbar rollbar allows Cross Site Request Forgery.This issue affects Rollbar: from n/a through <= 2.7.1.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00207 Published 2025-04-04 No fix listed CWE-352

Vulnerabilities

Filters

Rollbar.js Prototype Pollution Vulnerability in merge()

rollbar is a package designed to effortlessly track and debug errors in JavaScript…

WordPress Rollbar plugin <= 2.7.1 - Cross Site Request Forgery (CSRF) vulnerability