CVE-2025-8101

Publication date

2025-07-25 21:52:47

Family

Fluid Attacks

State

PUBLISHED

Description

Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) vulnerability in Linkify (linkifyjs) allows XSS Targeting HTML Attributes and Manipulating User-Controlled Variables.This issue affects Linkify: from 4.3.1 before 4.3.2.