GHSA-j452-xhg8-qg39MediumCVSS 6.5

Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution

Published
April 15, 2026
Last Modified
April 16, 2026

🔗 CVE IDs covered (1)

📋 Description

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution.

🎯 Affected products1

  • npm/protocol-buffers-schema:< 3.6.1

🔗 References (4)