Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-5758

Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution

Description

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mafintosh Protocol-buffers-schema parser

  • 3.6.0 to < 3.6.1affected

References