Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-8101

Linkify 4.3.1 - Prototype Pollution & HTML Attribute Injection (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Fluid Attacks

Description

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Linkify (linkifyjs) allows XSS Targeting HTML Attributes and Manipulating User-Controlled Variables.This issue affects Linkify: from 4.3.1 before 4.3.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linkify Linkify

Default version status: unaffected

  • 4.3.1 to < 4.3.2affected

References