Helmetjs vulnerabilities
We track 1 vulnerability in Helmetjs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 12, 2025.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Helmetjs vulnerabilities
- 8.8 High severity
content-security-policy-parser: Improperly Controlled Modification of Object Prototype Attributes
content-security-policy-parser parses content security policy directives. A prototype pollution vulnerability exists in versions 0.5.0 and earlier, wherein if a policy name is called __proto__, one can override the Object prototype. This issue has been patched