Skip to content
OpenAdvisories

Package · npm

elysia

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-66456

    Elysia vulnerable to prototype pollution with multiple standalone schema validation

    Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication. Versions 1.4.0 through 1.4.16 contain a prototype pollution vulnerability in `mergeDeep` after merging results of two standard sche…

    elysiajs elysia elysia npm