Skip to content
OpenAdvisories

Product · adonisjs

core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2026-48795

    Incomplete fix for CVE-2026-25754 in @adonisjs/bodyparser

    AdonisJS is a TypeScript-first web framework. From 10.1.3 until 10.1.5 and 11.0.3, AdonisJS @adonisjs/bodyparser incompletely fixed CVE-2026-25754 because nested multipart field payloads such as user.__proto__.polluted and constructor.prototype still caused l…

    adonisjs core @adonisjs/bodyparser npm
  • High 7.5
    CVE-2026-25762

    AdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection

    AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a denial of service (DoS) vulnerability exists in the multipart file handling logic of @adonisjs/bodyparser. When processing file uploads, the multipart parser may accum…

    adonisjs core @adonisjs/bodyparser npm
  • High 7.2
    CVE-2026-25754

    AdonisJS multipart body parsing has Prototype Pollution issue

    AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a prototype pollution vulnerability in AdonisJS multipart form-data parsing may allow a remote attacker to manipulate object prototypes at runtime. This issue has been p…

    adonisjs core @adonisjs/bodyparser npm