Web3js vulnerabilities
We track 2 vulnerabilities in Web3js products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2025.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Web3js vulnerabilities
- 7.5 High severity
Web3-core-method: Improperly Controlled Modification of Object Prototype Attributes
web3-core-method is a package designed to creates the methods on the web3 modules. A Prototype Pollution vulnerability in the attachToObject function of web3-core-method version 1.10.4 and before allows attackers to inject properties on Object.prototype via su
- 7.5 High severity
Web3-core-subscriptions: Improperly Controlled Modification of Object Prototype Attributes
The web3-core-subscriptions is a package designed to manages web3 subscriptions. A Prototype Pollution vulnerability in the attachToObject function of web3-core-subscriptions version 1.10.4 and before allows attackers to inject properties on Object.prototype v