elysia vulnerabilities and fixes

Recent CVEs affecting elysia, with upgrade or downgrade steps. 4 tracked.

elysia has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-03-18. Highest priority: CVE-2025-66456 (score 56/100).

• CVE-2025-66456 CRITICAL 9.8 UPGRADE Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-serv
• CVE-2025-66457 HIGH 8.8 UPGRADE Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-serv
• CVE-2026-31865 MEDIUM 6.5 UPGRADE Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation, and client-ser
• CVE-2026-30837 HIGH 7.5 UPGRADE Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-serv

FAQ

How do I fix elysia vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is elysia being exploited right now?

None of the tracked elysia CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which elysia CVE should I patch first?

CVE-2025-66456 currently ranks highest (56/100): Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-serv.

RSS feed for elysia · ← Back to latest CVEs