What’s Vulnerable › Vulnerabilities

CVE-2023-2972: Prototype Pollution in antfu/utils

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-05-30 · updated 2026-06-17
• Weakness: CWE-1321

Description

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3.

Affected products

• antfu/utils: before 0.7.3 — fixed in 0.7.3

How to fix

Upgrade to a fixed version: antfu/utils 0.7.3. Check the vendor advisory for mitigations.

References

• https://github.com/antfu/utils/commit/7f8b16c6181c988bdb96613fbb2533b345f68682
• https://huntr.dev/bounties/009f1cd9-401c-49a7-bd08-be35cff6faef
• https://github.com/antfu/utils/commit/7f8b16c6181c988bdb96613fbb2533b345f68682
• https://huntr.dev/bounties/009f1cd9-401c-49a7-bd08-be35cff6faef

Get alerted when CVE-2023-2972 or the next vulnerability affects your stack