GitHub Advisoryadvisory · npm

GHSA-j452-xhg8-qg39 Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution

MEDIUM Published 2026-04-15 Modified 2026-04-16 Official page ↗
Aliases
CVE-2026-5758
Ecosystem
npm
Packages
protocol-buffers-schema
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weaknesses
CWE-1321
Reviewed
2026-04-16

Affected packages

• npm protocol-buffers-schema: < 3.6.1 → fixed in 3.6.1

Description

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution.

Related

Alias · CVE (1)

  • CVE-2026-5758 JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the… vulnerability

Weakness · CWE (1)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References