CVE-2025-8101 Information

Jul 26, 2025 cve

Description

Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’) vulnerability in Linkify (linkifyjs) allows XSS Targeting HTML Attributes and Manipulating User-Controlled Variables.This issue affects Linkify: from 4.3.1 before 4.3.2.

Reference

https://fluidattacks.com/advisories/charly https://github.com/nfrasser/linkifyjs https://github.com/nfrasser/linkifyjs/releases/tag/v4.3.2 https://www.npmjs.com/package/linkifyjs

CNNVD-202507-3348 (Published: 2025-07-25)

Share on: