All vulnerabilities
CVE-2025-25977
canvg Prototype Pollution vulnerability
Description
An issue in canvg prior to v.4.0.3 and v3.0.11 can lead to prototype pollution via the Constructor of the class StyleElement.
Patch Available
Fix available through Seal Security.
No upgrade required, protect your application instantly.
Fix without upgrading
Score
8.9
Severity
High
Ecosystem
JavaScript
Publish Date
March 10, 2025
Modified Date
February 3, 2026
Score Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected Versions
