CVE-2026-5758
CVE-2026-5758 · Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution
This page contains facts from public vulnerability sources. Check the original advisory before updating.
JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution.
CVSS 6.5 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
protocol-buffers-schema parser
- Versions
- ≥ 3.6.0, < 3.6.1: Affected (custom)
Update to 3.6.1
protocol-buffers-schema npm
- Affected ranges
- SEMVER: < 3.6.1
Update to 3.6.1