What’s Vulnerable › Products

unjs defu vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your unjs defu version is affected

Latest unjs defu vulnerabilities

• CVE-2026-35209 — defu: Prototype pollution via `__proto__` key in defaults argument (CVSS 7.5)