@rvf vulnerabilities
We track 1 vulnerability in @rvf products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 27, 2026.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest @rvf vulnerabilities
- 8.2 High severity
rvf: Improperly Controlled Modification of Object Prototype Attributes
RVF (formerly Remix Validated Form) provides easy form validation and state management for React. From 6.0.0 to before 6.0.4 and 7.0.2, setPath in @rvf/set-get (used by @rvf/core to flatten incoming form data into a nested object) does not block the keys __pro