Vulnerabilities in unjs
5 resultsCVE-2025-54387MEDIUMIPX is Vulnerable to Path Traversal via Prefix Matching BypassEPSS 0.6%CVE-2026-35209HIGHdefu: Prototype pollution via `__proto__` key in defaults argumentEPSS 0.4%CVE-2026-39315MEDIUMUnhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()EPSS 0.3%CVE-2026-31860MEDIUMUnhead has a XSS bypass in `useHeadSafe` via attribute name injection and case-sensitive protocol checkEPSS 0.3%CVE-2026-31873NONEUnhead has a Bypass of URI Scheme Sanitization in makeTagSafe via Case-SensitivityEPSS 0.2%