adonisjs vulnerabilities
9 published CVEs name adonisjs among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 1Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-104150
AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
adonisjs · http-server
High8.7 - CVE-2026-107718
AdonisJS: Unencoded route parameters can produce open redirects
adonisjs · http-server
Medium6.1 - CVE-2026-61526
AdonisJS HTTP Server is vulnerable to reflected XSS through its exception handler
adonisjs · http-server
Medium6.1 - CVE-2026-48795
Incomplete fix for CVE-2026-25754 in @adonisjs/bodyparser
adonisjs · core
High8.6 - CVE-2026-40255
@adonisjs/http-server has an Open Redirect vulnerability
adonisjs · http-server
Medium6.1 - CVE-2026-25762
AdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection
adonisjs · core
High7.5 - CVE-2026-25754
AdonisJS multipart body parsing has Prototype Pollution issue
adonisjs · core
High7.2 - CVE-2026-22814
Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM State
adonisjs · lucid
High8.2 - CVE-2026-21440
AdonisJS Path Traversal in Multipart File Handling
adonisjs · core
Critical9.2