VULNERABILITY INTELLIGENCE
CVE-2025-8101
EPSS probability0.60%
CISA KEVNot currently listed
Published2025-07-25
Last modified2026-06-17
Description
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Linkify (linkifyjs) allows XSS Targeting HTML Attributes and Manipulating User-Controlled Variables.This issue affects Linkify: from 4.3.1 before 4.3.2.
Weakness classification
- help@fluidattacks.com: CWE-1321