VE
Product
velocity.js
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 0Low 0
Watch
Add velocity.js to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-73649 | 9.8 | Aug 13 | Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of CVE-2026-44966 fix) Affected: < 2.1.7 |
| CVE-2026-44966 | 9.8 | May 26 | Velocity.js: Prototype Pollution in #set path assignment Affected: <= 2.1.5 |
Showing 2