BuilderIO vulnerabilities
We track 2 vulnerabilities in BuilderIO products across 8 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest BuilderIO vulnerabilities
- 7.6 High severity
@builder.io/sdk-react: Improperly Controlled Modification of Object Prototype Attributes
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content blocks with binding keys containing __pro
- 8.6 High severity
gpt-crawler: Improper Limitation of a Pathname to a Restricted Directory
gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem path. Attackers can supply absolute paths or parent-directory segments to overwr