Skip to content
OpenAdvisories

Vendor

trpc

2 known vulnerabilities.

Products

trpc 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2025-68130

    tRPC has possible prototype pollution in `experimental_nextAppDirCaller`

    tRPC allows users to build and consume fully typesafe APIs without schemas or code generation. Starting in version 10.27.0 and prior to versions 10.45.3 and 11.8.0, a A prototype pollution vulnerability exists in `@trpc/server`'s `formDataToObject` function, …

    trpc trpc @trpc/server npm
  • High 8.7
    CVE-2025-43855

    tRPC 11 WebSocket DoS Vulnerability

    tRPC allows users to build & consume fully typesafe APIs without schemas or code generation. In versions starting from 11.0.0 to before 11.1.1, an unhandled error is thrown when validating invalid connectionParams which crashes a tRPC WebSocket server. This a…

    trpc trpc @trpc/server npm