Algoliasearch-helper vulnerabilities
We track 1 vulnerability in Algoliasearch-helper products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 27, 2025.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Algoliasearch-helper vulnerabilities
- 7.5 High severity
algoliasearch-helper: Improperly Controlled Modification of Object Prototype Attributes
Versions of the package algoliasearch-helper from 2.0.0-rc1 and before 3.11.2 are vulnerable to Prototype Pollution in the _merge() function in merge.js, which allows constructor.prototype to be written even though doing so throws an error. In the "extreme edg