Skip to content
OpenAdvisories

Package · npm

dref

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2025-26278

    dref is vulnerable to prototype pollution

    A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

    dref npm