CVE-2026-5758
JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution.
- Published Apr 15, 2026
- CVSS 6.5 medium
- 0.7% chance of exploitation in the next 30 days (EPSS)
Affected software
In the news
- Multiple vulnerabilities in IBM products CERT-FR ·