CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the _mix function.

• CWE-1321
• CWE-1321
• CWE-1321

• https://github.com/mde/utilities/issues/29Exploit, Issue Tracking, Third Party Advisory
• https://security.snyk.io/vuln/SNYK-JS-UTILITIES-3184491Exploit, Third Party Advisory
• https://github.com/mde/utilities/issues/29Exploit, Issue Tracking, Third Party Advisory
• https://security.snyk.io/vuln/SNYK-JS-UTILITIES-3184491Exploit, Third Party Advisory

Published

Feb 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2610Integer Overflow or Wraparound in GitHub repository vim/vim …7.8
• CVE-2023-26100In Progress Flowmon before 12.2.0, an application endpoint f…6.1
• CVE-2023-26101In Progress Flowmon Packet Investigator before 12.1.0, a Flo…7.5
• CVE-2023-26102All versions of the package rangy are vulnerable to Prototyp…8.2
• CVE-2023-26103Versions of the package deno before 1.31.0 are vulnerable to…7.5
• CVE-2023-26104All versions of the package lite-web-server are vulnerable t…7.5
• CVE-2023-26106All versions of the package dot-lens are vulnerable to Proto…7.5
• CVE-2023-26107All versions of the package sketchsvg are vulnerable to Arbi…7.8
• CVE-2023-26108Versions of the package @nestjs/core before 9.0.5 are vulner…5.3
• CVE-2023-26109All versions of the package node-bluetooth-serial-port are v…9.8
• CVE-2023-2611Advantech R-SeeNet versions 2.4.22 is installed with a hi…9.8
• CVE-2023-26110All versions of the package node-bluetooth are vulnerable to…9.8