`elysia`

Ecosystem:
npm

Package URL:
pkg:npm/elysia

Total PRs:
249 Dependabot PRs

Latest PR:
3 months ago

Unique Repositories:
58 repositories

Unique Repos (30 days):
3 repositories

Security Advisories

Elysia has a string URL format ReDoS

GHSA-f45g-68q3-5w8x CVE-2026-30837 HIGH published 5 months ago • updated 14 days ago

### Impact `t.String({ format: 'url' })` is vulnerable to redos Repeating a partial url format (protocol and hostname) multiple times cause regex ...

Elysia vulnerable to prototype pollution with multiple standalone schema validation

GHSA-hxj9-33pp-j2cc CVE-2025-66456 CRITICAL published 8 months ago • updated about 2 hours ago

Prototype pollution vulnerability in `mergeDeep` after merging results of two standard schema validations with the same key. Due to the ordering of...

1.4.14 → 1.4.27 Patch PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 8 updates

CaffeeLake/bun #312

0.6.24 → 1.4.28 Major PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 4 updates

4xiaxia/ChatTutor #2

1.4.19 → 1.4.28 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

Sherlock999xxx/voltagent #60

1.4.19 → 1.4.27 Patch PR

Open 4 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

Sherlock999xxx/voltagent #59

1.4.19 → 1.4.27 Patch PR

Closed 4 months ago 3 comments

chore(deps): bump the minor-and-patch group across 1 directory with 18 updates

Michael0520/modern-monorepo-template #9

1.4.25 → 1.4.28 Patch PR

Closed 4 months ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 16 updates

Michael0520/modern-monorepo-template #8

1.4.25 → 1.4.28 Patch PR

Closed 4 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

Sherlock999xxx/voltagent #50

1.4.19 → 1.4.27 Patch PR

Closed 5 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 9 updates

Sherlock999xxx/voltagent #49

1.4.19 → 1.4.27 Patch PR

Open 5 months ago 2 comments

build(deps): bump the minor-and-patch group in /auth with 6 updates

OFFIS-RIT/kiwi #243

1.4.27 → 1.4.28 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 9 updates

rivet-dev/rivet #4445

1.4.12 → 1.4.27 Patch PR

Open 5 months ago 13 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 9 updates

Sherlock999xxx/voltagent #40

1.4.19 → 1.4.27 Patch PR

Closed 5 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 9 updates

Sherlock999xxx/voltagent #37

1.4.19 → 1.4.27 Patch PR

Open 5 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates

felixmosh/bull-board #1108

1.4.26 → 1.4.27 Patch PR

Closed 5 months ago 1 comment

build(deps): bump elysia from 1.4.19 to 1.4.27

embed-team/embedly #60

1.4.19 → 1.4.27 Patch PR

Open 5 months ago 2 comments

chore(deps): bump elysia from 1.3.18 to 1.4.27

WomB0ComB0/vite-component-testing #4

1.3.18 → 1.4.27 Minor PR

Open 5 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 11 updates

Sherlock999xxx/voltagent #35

1.4.19 → 1.4.26 Patch PR

Open 5 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 10 updates

Sherlock999xxx/voltagent #33

1.4.19 → 1.4.26 Patch PR

Closed 5 months ago 3 comments

chore(deps): bump elysia from 1.4.19 to 1.4.26 in the npm_and_yarn group across 1 directory

wraps-team/wraps #35

1.4.19 → 1.4.26 Patch PR

Closed 5 months ago 3 comments

chore(deps): bump elysia from 1.4.22 to 1.4.26 in the npm_and_yarn group across 1 directory

DobroslavRadosavljevic/elysia-start #6

1.4.22 → 1.4.26 Patch PR

Open 5 months ago 2 comments

chore(deps): bump elysia from 1.4.21 to 1.4.26 in the npm_and_yarn group across 1 directory

Maicarons/azhot-ts #1

1.4.21 → 1.4.26 Patch PR

Open 5 months ago 1 comment

Bump elysia from 1.4.18 to 1.4.27

Sheryoo/todo-api #115

1.4.18 → 1.4.27 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump elysia from 1.4.25 to 1.4.27

fazer-ai/bun-elysia-react-tailwind #20

1.4.25 → 1.4.27 Patch PR

Closed 5 months ago 1 comment

chore(deps)(deps): bump elysia from 1.4.26 to 1.4.27

guyromellemagayano/portfolio #1003

1.4.26 → 1.4.27 Patch PR

Open 5 months ago 2 comments

chore(deps): bump the minor-and-patch group with 12 updates

Michael0520/modern-monorepo-template #4

1.4.25 → 1.4.27 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump elysia from 1.4.22 to 1.4.26 in /discord-bot

matiix310/grimm-website #91

1.4.22 → 1.4.26 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump elysia from 1.4.22 to 1.4.25 in /discord-bot

matiix310/grimm-website #79

1.4.22 → 1.4.25 Patch PR

Closed 6 months ago 1 comment

build(deps): bump elysia from 1.4.24 to 1.4.25 in /apps/sabine

sabinelab/sabine #115

1.4.24 → 1.4.25 Patch PR

Closed 6 months ago 1 comment

Update elysia requirement from ^1.4.22 to ^1.4.24

keift/spurtowl #17

^1.4.22 → ^1.4.24 Patch PR

Closed 6 months ago 1 comment

build(deps): bump elysia from 1.4.22 to 1.4.24 in /apps/sabine

sabinelab/sabine #113

1.4.22 → 1.4.24 Patch PR

Closed 6 months ago 1 comment

Update elysia requirement from ^1.4.22 to ^1.4.23

keift/spurtowl #15

^1.4.22 → ^1.4.23 Patch PR

Closed 6 months ago 1 comment

Bump the minor-and-patch group across 1 directory with 12 updates

bugranalci/starbidzSDK #26

1.4.19 → 1.4.22 Patch PR

Open 6 months ago 2 comments

chore(deps): bump elysia from 1.4.19 to 1.4.22

PunGrumpy/logixlysia #206

1.4.19 → 1.4.22 Patch PR

Open 6 months ago 3 comments

chore(deps): bump the dependencies group across 1 directory with 16 updates

netsvetoch/sysoev-backend #14

1.4.18 → 1.4.22 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump elysia from 1.3.18 to 1.4.18

WomB0ComB0/vite-component-testing #2

1.3.18 → 1.4.18 Minor PR

Open 7 months ago 1 comment

Bump the bun group across 1 directory with 12 updates

bedstack/bedstack-stripped #25

1.3.5 → 1.4.22 Minor PR

Closed 7 months ago 1 comment

chore(deps): bump elysia from 1.4.17 to 1.4.22

fazer-ai/baileys-api #229

1.4.17 → 1.4.22 Patch PR

Open 7 months ago 1 comment

build(deps): bump elysia from 1.4.21 to 1.4.22

sabinelab/sabine #67

1.4.21 → 1.4.22 Patch PR

Closed 7 months ago 1 comment

build(deps): bump elysia from 1.4.20 to 1.4.21

sabinelab/sabine #54

1.4.20 → 1.4.21 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump elysia from 1.4.17 to 1.4.21

fazer-ai/baileys-api #225

1.4.17 → 1.4.21 Patch PR

Open 7 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 13 updates

physphile/sysoev-backend #10

1.4.18 → 1.4.19 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump elysia from 1.4.0 to 1.4.18 in the npm_and_yarn group across 1 directory

Trancendos/elysia-bearer #1

1.4.0 → 1.4.18 Patch PR

Open 8 months ago 1 comment

build(deps): bump elysia from 1.4.13 to 1.4.18 in the npm_and_yarn group across 1 directory

gaeljacquin/gaeldle #96

1.4.13 → 1.4.18 Patch PR

Closed 8 months ago 1 comment

Bump elysia from 1.0.27 to 1.4.18 in /packages/elysia-request-id

Pixelicc/Packages #36

1.0.27 → 1.4.18 Minor PR

Closed 8 months ago 1 comment

Bump elysia from 1.4.9 to 1.4.18 in /Server

Vajrap/ABED #4

1.4.9 → 1.4.18 Patch PR

Closed 8 months ago 1 comment

build(deps): Bump elysia from 1.4.12 to 1.4.18 in /api in the npm_and_yarn group across 1 directory

SabaFTW/ves-elysia-portal #36

1.4.12 → 1.4.18 Patch PR

Open 8 months ago 1 comment

chore(deps): bump elysia from 1.4.17 to 1.4.18

fazer-ai/baileys-api #213

1.4.17 → 1.4.18 Patch PR

Open 8 months ago 2 comments

chore(deps): bump the dependencies group across 1 directory with 8 updates

physphile/tempalte-bun-elysia #26

1.4.16 → 1.4.18 Patch PR

Closed 8 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 4 updates

physphile/tempalte-bun-elysia #17

1.4.15 → 1.4.16 Patch PR

Closed 9 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 3 updates

physphile/tempalte-bun-elysia #16

1.4.15 → 1.4.16 Patch PR

Closed 9 months ago 1 comment

Package Details

Name:	`elysia`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/elysia`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 1

HIGH 2

MODERATE 1

View All npm Advisories

Package Information

Description:

Ergonomic Framework for Human

Repository:	https://github.com/elysiajs/elysia
Homepage:	https://github.com/elysiajs/elysia
Latest Release:	`1.1.26` over 1 year ago
Dependent Repos:	45
Dependent Packages:	83
Downloads:	207,296
Ranking:	Top 2.0294% by dependent repos Top 1.4357% by downloads Top 1.0781% by dependent pkgs

PR Status

Open 108 (43.4%)

Merged 11 (4.4%)

Closed 123 (49.4%)

PR Types

Major 8 (3.2%)

Minor 76 (30.5%)

Patch 155 (62.2%)

elysia

Security Advisories

Elysia has a string URL format ReDoS

Elysia vulnerable to prototype pollution with multiple standalone schema validation

Elysia Cookie Value Prototype Pollution

Elysia affected by arbitrary code injection through cookie config

Recent PRs

Package Details

Security Advisories

4

Package Information

PR Status

PR Types

`elysia`