Intel

AIKIDO-2025-10511

linkify-react is vulnerable to Prototype Pollution

Prototype PollutionCVE-2025-8101 Published Jul 31, 2025

80

High Risk

This Affects:

jslinkify-react
4.0.0 - 4.3.1
Fixed in 4.3.2
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to several potential prototype pollution vulnerabilities, which could allow attackers to manipulate object properties and impact application behavior.

Who does this affect?

You are affected if you are using a version which is within vulnerability ranges

Background info

linkify-react is vulnerable to Prototype Pollution in versions 4.0.0 - 4.3.1.

How to fix this

Upgrade the linkify-react library to the patch version.