algoliasearch-helper (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package algoliasearch-helper, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2025-3193 — CVSS 7.5 (high): Versions of the package algoliasearch-helper from 2.0.0-rc1 and before 3.11.2 are vulnerable to Prototype Pollution in the _merge()…
• CVE-2021-23433 — CVSS 5.9 (medium): The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in…