pkg:npm/elysia

All known vulnerabilities

• HIGH7.5CVE-2026-30837Elysia has a string URL format ReDoS
  from 0, < 1.4.26
• MEDIUM6.5CVE-2026-31865Elysia Cookie Value Prototype Pollution
  from 0, < 1.4.27
• —CVE-2025-66457Elysia affected by arbitrary code injection through cookie config
  from 0, < 1.4.18
• —CVE-2025-66456Elysia vulnerable to prototype pollution with multiple standalone schema validation
  >= 1.4.0, < 1.4.17