LO
Product
locutus
by locutusjs · last CVE Mar 27, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 0Low 0
Watch

Add locutus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33994
9.8
1%
Mar 27
Locutus Prototype Pollution due to incomplete fix for CVE-2026-25521
Affected: >= 2.0.39, < 3.0.25
CVE-2026-33993
9.8
1%
Mar 27
Locutus has Prototype Pollution via __proto__ Key Injection in unserialize()
Affected: < 3.0.25
CVE-2026-32304
9.8
1%
Mar 12
Locutus: RCE via unsanitized input in create_function()
Affected: < 3.0.14
CVE-2026-25521
8.8
0%
Feb 4
Locutus is vulnerable to Prototype Pollution
Affected: >= 2.0.12, < 2.0.39
CVE-2026-29091
8.1
1%
Mar 6
Locutus: Remote Code Execution (RCE) in locutus call_user_func_array due to Code Injection
Affected: < 3.0.0
Showing 5