CVE-2025-61602: Unvalidated Emoji Mart Data Access

Direct unvalidated access to dynamic keys in `@emoji-mart/data` can cause an unhandled TypeError if a user-supplied key does not exist. This can lead to a Denial of Service (DoS) by crashing the application. Validate the key (e.g., check if it exists) or use optional chaining before accessing nested properties.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0TS
greprules fetch cve-2025-61602-unvalidated-emoji-mart-data-access --engine opengrep

Description

Direct unvalidated access to dynamic keys in `@emoji-mart/data` can cause an unhandled TypeError if a user-supplied key does not exist. This can lead to a Denial of Service (DoS) by crashing the application. Validate the key (e.g., check if it exists) or use optional chaining before accessing nested properties.