locutusjs

Products

ProductCVEsExploitedLatest
locutus5–Mar 27, 2026

Exploited and recent CVEs

  • CVE-2026-33994 Critical 9.8 Locutus Prototype Pollution due to incomplete fix for CVE-2026-25521 0.6%
  • CVE-2026-33993 Medium 6.9 Locutus has Prototype Pollution via __proto__ Key Injection in unserialize() 0.6%
  • CVE-2026-32304 Critical 9.8 Locutus: RCE via unsanitized input in create_function() 0.6%
  • CVE-2026-29091 High 8.1 Locutus: Remote Code Execution (RCE) in locutus call_user_func_array due to Code Injection 0.9%
  • CVE-2026-25521 Critical 9.3 Locutus is vulnerable to Prototype Pollution 0.3%