Vulnerabilities in elysiajs

4 results

CVE-2025-66457HIGHElysia affected by arbitrary code injection through cookie configEPSS 0.7%CVE-2026-30837HIGHElysia has a string URL format redosEPSS 0.5%CVE-2025-66456CRITICALElysia vulnerable to prototype pollution with multiple standalone schema validationEPSS 0.5%CVE-2026-31865MEDIUMElysia Cookie Value Prototype PollutionEPSS 0.2%