CVE-2025-66456 | elysiajs elysia up to 1.4.16 prototype pollution (GHSA-8vch-m3f4-q8jf)

December 10, 2025 Yanac

A vulnerability was found in elysiajs elysia up to 1.4.16. It has been rated as critical. This impacts an unknown function. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).

This vulnerability is documented as CVE-2025-66456. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More