CyberSecBulletin

Trpc vulnerabilities

We track 2 vulnerabilities in Trpc products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 16, 2025.

2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score

Latest Trpc vulnerabilities

  • 8.5 High severity

    trpc: Improperly Controlled Modification of Object Prototype Attributes

    CVE-2025-68130Trpc

    tRPC allows users to build and consume fully typesafe APIs without schemas or code generation. Starting in version 10.27.0 and prior to versions 10.45.3 and 11.8.0, a A prototype pollution vulnerability exists in `@trpc/server`'s `formDataToObject` function, w

  • 8.7 High severity

    trpc: Uncaught Exception

    CVE-2025-43855Trpc

    tRPC allows users to build & consume fully typesafe APIs without schemas or code generation. In versions starting from 11.0.0 to before 11.1.1, an unhandled error is thrown when validating invalid connectionParams which crashes a tRPC WebSocket server. This al