@casl/ability

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
Licenses: MIT

Direct Vulnerabilities

Known vulnerabilities in the @casl/ability package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Prototype Pollution

<7.0.2
  • C
Prototype Pollution

>=2.4.0 <6.7.5

Package versions

100 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
7.1.210 Nov, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.1.131 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.1.028 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.0.328 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.0.215 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.0.16 Jul, 2026
  • 0
    C
  • 0
    H
  • 1
    M
  • 0
    L
7.0.021 May, 2026
  • 0
    C
  • 0
    H
  • 1
    M
  • 0
    L
7.0.0-rc8 May, 2026
  • 0
    C
  • 0
    H
  • 1
    M
  • 0
    L
6.8.331 Oct, 2026
  • 0
    C
  • 0
    H
  • 1
    M
  • 0
    L
6.8.231 Oct, 2026
  • 0
    C
  • 0
    H
  • 1
    M
  • 0
    L