Search for packages
| purl | pkg:npm/web3-core-method@1.6.1 |
| Next non-vulnerable version | 1.10.4-dev.0 |
| Latest non-vulnerable version | 1.10.4-dev.0 |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1pgc-xxaf-sbbq
Aliases: CVE-2025-57329 GHSA-2j4c-9qqq-896r |
web3-core-method is vulnerable to prototype pollution web3-core-method is a package designed to creates the methods on the web3 modules. A Prototype Pollution vulnerability in the attachToObject function of web3-core-method version 1.10.4 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-06T06:11:15.249587+00:00 | GitLab Importer | Affected by | VCID-1pgc-xxaf-sbbq | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/web3-core-method/CVE-2025-57329.yml | 38.6.0 |