CVE-2026-5758

Updated on 15 Apr 2026

Severity

6.5 Medium severity

Details

CVSS score
6.5
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Overview

About vulnerability

JavaScript is vulnerable to prototype pollution in Mafintosh’s protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution.

Details

Affected product:
protocol-buffers-schema
Affected packages:
protocol-buffers-schema @ 3.6.0