Intel

AIKIDO-2025-10507

linkifyjs is vulnerable to Prototype Pollution

Prototype PollutionCVE-2025-8101 Published Jul 29, 2025

80

High Risk

This Affects:

jslinkifyjs
4.0.0 - 4.3.1
Fixed in 4.3.2
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to several potential prototype pollution vulnerabilities, which could allow attackers to manipulate object properties and impact application behavior.

Who does this affect?

You are affected if you are using a version which is within vulnerability ranges

Background info

linkifyjs is vulnerable to Prototype Pollution in versions 4.0.0 - 4.3.1.

How to fix this

Upgrade the linkifyjs library to the patch version.