Description (CNA)
JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mafintosh / Protocol-buffers-schema parser | affected 3.6.0 before 3.6.1 |
CWE
No CWE identifiers supplied.
References
- https://github.com/mafintosh/protocol-buffers-schema/pull/70
- https://morielharush.github.io/2026/04/12/cve-2026-5758-protocol-buffers-schema-prototype-pollution/
ADP enrichment
No English description supplied.
No references supplied.