Homepage

bun vulnerabilities

Bun is a fast all-in-one JavaScript runtime.

  • latest version

    1.3.1

  • latest non vulnerable version

    1.3.1

  • first published

    12 years ago

  • latest version published

    5 days ago

  • licenses detected

  • View bun package health on Snyk Advisor  (opens in a new tab)
    • Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the bun package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Prototype Pollution

    >0.0.12 <1.1.30

    Package versions

    1130 VERSIONS IN TOTAL See all versions
    versionpublisheddirect vulnerabilities
    1.3.122 Oct, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    1.3.1-canary.20251027.127 Oct, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    1.3.1-canary.20251026.126 Oct, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    1.3.1-canary.20251025.125 Oct, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    1.3.1-canary.20251024.124 Oct, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    1.3.1-canary.20251023.123 Oct, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    1.3.1-canary.20251022.122 Oct, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    1.3.010 Oct, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    1.3.0-canary.20251021.121 Oct, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    1.3.0-canary.20251020.120 Oct, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L