← Vulnerability feed

Vulnerability record · CVE-2024-38997 · published 1 July 2024

CVE-2024-38997: Swiperjs swiper prototype pollution vulnerability

Swiperjs · Swiper

adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

6.5 CVSS 3.1 Medium EPSS 0.46% · top 62.4% CWE-1321 · Prototype pollution
6.5CVSS 3.1 base score
0.46%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://gist.github.com/mestrtee/840f5d160aab4151bd0451cfb822e6b5 ExploitThird Party Advisory
https://gist.github.com/mestrtee/840f5d160aab4151bd0451cfb822e6b5 ExploitThird Party Advisory

Track CVE-2024-38997 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-23370Swiperjs swiper vulnerabilityThis affects the package swiper before 6.5.1.EPSS 2.2%9.4CVE-2026-27212Swiperjs swiper prototype pollution vulnerabilitySwiper is a free and mobile touch slider with hardware accelerated transitions and native behavior. Versions 6.5.1 through 12.1.1 have a Prototype po…EPSS 0.50%6.5CVE-2024-39853Swiperjs swiper prototype pollution vulnerabilityadolph_dudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute…EPSS 0.52%6.5CVE-2024-39000Swiperjs swiper prototype pollution vulnerabilityadolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execut…EPSS 0.39%8.6CVE-2026-34621Adobe Acrobat Reader prototype pollution leads to code executionAdobe Acrobat and Reader (versions 24.001.30356, 26.001.21367 and earlier) are affected by prototype pollution (CWE-1321) that can result in arbitrar…KEVEPSS 2.2%analysed

Source: NIST National Vulnerability Database (record CVE-2024-38997), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.