unjs vulnerabilities
5 published CVEs name unjs among the affected products.
- 5Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-39315
Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()
unjs · unhead
Medium6.1 - CVE-2026-35209
defu: Prototype pollution via `__proto__` key in defaults argument
unjs · defu
High7.5 - CVE-2026-31873
Unhead has a Bypass of URI Scheme Sanitization in makeTagSafe via Case-Sensitivity
unjs · unhead
None0.0 - CVE-2026-31860
Unhead has a XSS bypass in `useHeadSafe` via attribute name injection and case-sensitive protocol check
unjs · unhead
Medium5.3 - CVE-2025-54387
IPX is Vulnerable to Path Traversal via Prefix Matching Bypass
unjs · ipx
Medium6.9