Skip to content
OpenAdvisories

Package · npm

elysia

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-56669

    Elysia: Inefficient Algorithmic Complexity and Interpretation Conflict

    Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation, and client-server communication. Prior to 1.4.29, Elysia uses getAll in form data normalization for multipart/form-data endpoints, causing the amount of work to gr…

    elysiajs elysia elysia npm
  • High 7.5
    CVE-2026-30837

    Elysia has a string URL format redos

    Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication. Prior to 1.4.26 , t.String({ format: 'url' }) is vulnerable to ReDoS. Repeating a partial url format (protocol and hostname) multip…

    elysiajs elysia elysia npm
  • High 7.5
    CVE-2025-66457

    Elysia affected by arbitrary code injection through cookie config

    Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication. Versions 1.4.17 and below are subject to arbitrary code execution from cookie config. When dynamic cookies are enabled (e.g. there …

    elysiajs elysia elysia npm