CVE-2025-68130
1 advisory.
npm/@trpc/server CVE-2025-68130: high, EPSS 0.40%
tRPC has possible prototype pollution in `experimental_nextAppDirCaller`
Action: Upgrade @trpc/server to 10.45.3 or later.
npm i @trpc/server@10.45.3npm i @trpc/server@11.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.27.0 | 10.45.3 | - |
| 11.0.0 | 11.8.0 | - |
Fixed versions
| 10.45.3 | 11.8.0 |
Sources
- osv: GHSA-43p4-m455-4f4j
- https://github.com/trpc/trpc/security/advisories/GHSA-43p4-m455-4f4j
- https://nvd.nist.gov/vuln/detail/CVE-2025-68130
- https://github.com/trpc/trpc/commit/78629d524968ef8db5a7adf68d8b95a44369d77e
- https://github.com/trpc/trpc
CVE-2025-68130 · published · modified · JSON