Skip to content
OpenAdvisories

Package · npm

yayson

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2026-61534

    Yayson: Prototype pollution in the Store/LegacyStore deserialization

    Yayson is a library for serializing and reading JSON API data in JavaScript. Prior to 4.3.0, Store and LegacyStore use attacker-controlled JSON:API type, id, and relationship names as keys in plain-object lookup tables in src/yayson/store.ts and src/yayson/le…

    confetti yayson yayson npm