AIKIDO-2025-10081

php-date-formatter is vulnerable to Prototype Pollution

40

Medium

php-date-formatter JS

AIKIDO-2025-10081: php-date-formatter is vulnerable to Prototype Pollution in versions 1.2.0 - 1.3.6.

Prototype Pollution
Vuln in 1.2.0 - 1.3.6
Fixed in 1.3.7
No CVE available
TL;DR

Who does this affect?

How can it be fixed?

Background info

Link to vendor website

Logo
ยฉ 2024 Aikido Security BV | BE0792914919
๐Ÿ‡ช๐Ÿ‡บ Registered address: Coupure Rechts 88, 9000, Ghent, Belgium
๐Ÿ‡ช๐Ÿ‡บ Office address: Gebroeders van Eyckstraat 2, 9000, Ghent, Belgium
๐Ÿ‡บ๐Ÿ‡ธ Office address: 95 Third St, 2nd Fl, San Francisco, CA 94103, US
Any use of the intel.aikido.dev website and content is explicitly subject to Aikido Terms of Use.
The Intel vulnerability and malware feed is licensed under a dual license.