Vendor/product archive

unjs / defu CVEs

Beta · best-effort

1 CVEs tagged to unjs / defu — 0 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to unjs vendor archive

CVE-2026-35209

Published Apr 6, 2026

defu is software that allows uers to assign default properties recursively. Prior to version 6.1.5, applications that pass unsanitized user input (e.g. parsed JSON request bodies,…

CVSS 7.5 · High

evidence mentions: 4
Buzz score: 21.1

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1