Skip to content
OpenAdvisories

Product · BuilderIO

@builder.io/sdk-react

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-92781

    Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via builder.userAttributes

    Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the unflatten helper that processes builder.userAttributes query parameters without prototype guards. Attackers can craft preview links with __proto__ or p…

    BuilderIO @builder.io/sdk-react-nextjs @builder.io/sdk-vue @builder.io/sdk-solid