Intel

AIKIDO-2025-10568

utilium is vulnerable to Prototype Pollution

Prototype Pollution Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Aug 20, 2025

47

Medium Risk

This Affects:

jsutilium
0.8.3 - 2.3.11
Fixed in 2.3.12
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to prototype pollution in the getByString and setByString functions, which may allow attackers to manipulate object prototypes and potentially alter application behavior or escalate privileges.

Who does this affect?

You are affected if you are using a version which is within vulnerability ranges

Background info

utilium is vulnerable to Prototype Pollution in versions 0.8.3 - 2.3.11.

How to fix this

Upgrade the utilium library to the patch version.