prototype pollution

Everything Patch Review has reported about prototype pollution: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Update GraphQL Tools Utils to 12.0.2 to Fix High Severity Prototype Pollution Flaw

Developers using the npm package @graphql-tools/utils must upgrade immediately to patch a flaw that allows attackers to pollute object prototypes via unvalidated paths.

Oct 22, 2026

Vulnerabilities

Stop Prototype Pollution: Practical Prevention for JavaScript Apps

Sanitizing input fails to stop prototype pollution because the vulnerability triggers during object merging, not during initial data reception from a user.

Oct 9, 2026