HIGH7.5npm
GHSA-39q4-p535-c852· CVE-2021-23392, SNYK-JS-LOCUTUS-1090597Uncontrolled Resource Consumption in locutus
Modified: 7/8/2026
package
npm/locutus
pkg:npm/locutus
MEDIUMnpm
GHSA-4mph-v827-f877· CVE-2026-33993Locutus has Prototype Pollution via __proto__ Key Injection in unserialize()
Modified: 3/30/2026
CRITICAL9.8npm
GHSA-f98m-q3hr-p5wq· CVE-2020-7719, SNYK-JS-LOCUTUS-598675Prototype Pollution in locutus
Modified: 7/8/2026
HIGH8.1npm
GHSA-fp25-p6mj-qqg6· CVE-2026-29091locutus call_user_func_array vulnerable to Remote Code Execution (RCE) due to Code Injection
Modified: 3/6/2026
CRITICAL9.8npm
GHSA-h86x-mv66-gr5q· CVE-2020-13619OS Command Injection in Locutus
Modified: 11/8/2023
CRITICALnpm
GHSA-rxrv-835q-v5mh· CVE-2026-25521locutus is vulnerable to Prototype Pollution
Modified: 2/5/2026
MEDIUMnpm
GHSA-vc8f-x9pp-wf5p· CVE-2026-33994Locutus Prototype Pollution due to incomplete fix for CVE-2026-25521
Modified: 3/30/2026
CRITICAL9.8npm
GHSA-vh9h-29pq-r5m8· CVE-2026-32304Locutus vulnerable to RCE via unsanitized input in create_function()
Modified: 3/16/2026