Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/rangy@1.3.1
purl pkg:npm/rangy@1.3.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-v5m8-pp13-8kbx
Aliases:
CVE-2023-26102
GHSA-65rp-mhqf-8gj3
rangy vulnerable to Prototype Pollution All versions of the package rangy is vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js. The function uses recursive merge which can lead an attacker to modify properties of the Object.prototype There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-07T20:48:28.210861+00:00 GHSA Importer Affected by VCID-v5m8-pp13-8kbx https://github.com/advisories/GHSA-65rp-mhqf-8gj3 38.6.0
2026-06-06T03:30:51.529756+00:00 GitLab Importer Affected by VCID-v5m8-pp13-8kbx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/rangy/CVE-2023-26102.yml 38.6.0