{"action":"Upgrade @trpc/server to 10.45.3 or later.","affected":[{"fixed":"10.45.3","introduced":"10.27.0"},{"fixed":"11.8.0","introduced":"11.0.0"}],"component":"@trpc/server","cve_ids":["CVE-2025-68130"],"ecosystem":"npm","epss":0.00397,"exploited":false,"fixed_versions":["10.45.3","11.8.0"],"ghsa_id":"GHSA-43p4-m455-4f4j","id":"tcs_01M5KEZ0PDT638ETRMP4HF1VQB","modified_at":"2026-09-10T03:50:31.282502907Z","published_at":"2025-12-16T19:37:57Z","references":["https://osv.dev/vulnerability/GHSA-43p4-m455-4f4j","https://github.com/trpc/trpc/security/advisories/GHSA-43p4-m455-4f4j","https://nvd.nist.gov/vuln/detail/CVE-2025-68130","https://github.com/trpc/trpc/commit/78629d524968ef8db5a7adf68d8b95a44369d77e","https://github.com/trpc/trpc"],"severity":{"label":"high","score":8.5},"sources":[{"source":"osv","source_id":"GHSA-43p4-m455-4f4j","url":"https://osv.dev/vulnerability/GHSA-43p4-m455-4f4j"},{"source":"nvd","source_id":"CVE-2025-68130","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68130"}],"summary":"tRPC has possible prototype pollution in `experimental_nextAppDirCaller`"}