Skip to content

PatchFirst · Latest vulnerabilities

@casl/ability vulnerabilities

Vulnerabilities published for @casl/ability in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerability: 1

CVE-2026-1774
Critical · CVSS 9.8EPSS 0.71%Fix available
CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability.
CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability.
@casl/ability Node.js
- Update to 6.7.5
Published February 10, 2026Updated February 11, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →