Bun vulnerabilities
We track 1 vulnerability in Bun products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Bun vulnerabilities
- 7.5 High severity
bun: Improperly Controlled Modification of Object Prototype Attributes
Versions of the package bun after 0.0.12 and before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. **Note:** This issue relates to the widely k