CVE-2026-5758
Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution
Summary
Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution
Original description
The description as published by the source.
JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web morielharush.github.io