HIGH7.5npm
GHSA-39q4-p535-c852· CVE-2021-23392, SNYK-JS-LOCUTUS-1090597Uncontrolled Resource Consumption in locutus
Modified: 7/8/2026
package
pkg:npm/locutus
Uncontrolled Resource Consumption in locutus
Modified: 7/8/2026
Locutus has Prototype Pollution via __proto__ Key Injection in unserialize()
Modified: 3/30/2026
Prototype Pollution in locutus
Modified: 7/8/2026
locutus call_user_func_array vulnerable to Remote Code Execution (RCE) due to Code Injection
Modified: 3/6/2026
OS Command Injection in Locutus
Modified: 11/8/2023
locutus is vulnerable to Prototype Pollution
Modified: 2/5/2026
Locutus Prototype Pollution due to incomplete fix for CVE-2026-25521
Modified: 3/30/2026
Locutus vulnerable to RCE via unsanitized input in create_function()
Modified: 3/16/2026