Vulnerabilities - Keploy: AI Testing Assistant for Developers – Supercharge Unit, Integration, and API Testing in Python, JavaScript, TypeScript, Java, PHP, Go, and More - Visual Studio Code

List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2026/04/03

All detected vulnerabilities are fixable

Run the update/upgrade command in your package manager to resolve the detected vulnerabilities

CVSS Score

CVE

Summary

Tags

critical

9.4

CVE-2025-7783

form-data uses insufficiently random values, allowing HTTP Parameter Pollution (HPP) via predictable boundary values generated by Math.random().

Exploits Exist

Fix Available

high

7.5

CVE-2025-58754

Axios is vulnerable to a denial-of-service (DoS) attack due to unbounded memory allocation when handling 'data:' scheme URLs.

Exploits Exist

Fix Available

high

7.5

CVE-2026-25639

Axios is vulnerable to a denial of service attack when processing configuration objects containing __proto__ as an own property.

Exploits Exist

Fix Available

medium

5.3

CVE-2026-27125

Svelte's server-side rendering is vulnerable to unexpected attribute inclusion due to inherited properties from the object's prototype chain.

Fix Available

medium

5.3

CVE-2026-27901

Svelte is vulnerable to HTML injection and Cross-Site Scripting (XSS) due to improper escaping of user-controllable input.

Fix Available

medium

5.1

CVE-2026-27121

Svelte is vulnerable to cross-site scripting (XSS) during server-side rendering when using spread syntax to render attributes from untrusted data.

Fix Available

medium

5.1

CVE-2026-27122

Svelte does not validate dynamic element tag names in server-side rendering, leading to potential HTML injection.

Fix Available

Keploy: AI Testing Assistant for Developers – Supercharge Unit, Integration, and API Testing in Python, JavaScript, TypeScript, Java, PHP, Go, and More

SAFE Assessment

Compliance

Security

Threats

Did you know...