← Back

Web3js

web3js

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Web3 Core Subscriptions
web3-core-subscriptions
1 CVE
Web3 Core Method
web3-core-method
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-57329
1Web3js
1Web3 Core Method
Jun 17, 2026
Sep 24, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
web3-core-method is a package designed to creates the methods on the web3 modules. A Prototype Pollution vulnerability in the attachToObject function of web3-core-method version 1.10.4 and before allows attackers to inje...Show more
web3-core-method is a package designed to creates the methods on the web3 modules. A Prototype Pollution vulnerability in the attachToObject function of web3-core-method version 1.10.4 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.Show less
CVE-2025-57330
1Web3js
1Web3 Core Subscriptions
Jun 17, 2026
Sep 24, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
The web3-core-subscriptions is a package designed to manages web3 subscriptions. A Prototype Pollution vulnerability in the attachToObject function of web3-core-subscriptions version 1.10.4 and before allows attackers to...Show more
The web3-core-subscriptions is a package designed to manages web3 subscriptions. A Prototype Pollution vulnerability in the attachToObject function of web3-core-subscriptions version 1.10.4 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.Show less