Skip to content
OpenAdvisories

Vendor

open-circle

2 known vulnerabilities.

Products

valibot 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-59952

    Valibot: record() issue paths can make flatten() throw for inherited Object property names

    Valibot helps validate data using a schema. Versions prior to 1.4.2 can throw a TypeError inside its flatten() helper when validation issues contain attacker-controlled object keys such as toString, valueOf, or hasOwnProperty. The issue is reachable through n…

    open-circle valibot valibot npm