{"id":"EUVD-2026-22993","enisaUuid":"c1611b75-9e43-344d-b7aa-0a6998b1c92c","description":"JavaScript is vulnerable to prototype pollution in Mafintosh\u0027s protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution.","datePublished":"Apr 15, 2026, 5:20:13 PM","dateUpdated":"Apr 15, 2026, 6:55:45 PM","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","references":"https://github.com/mafintosh/protocol-buffers-schema/pull/70\nhttps://morielharush.github.io/2026/04/12/cve-2026-5758-protocol-buffers-schema-prototype-pollution/\n","aliases":"CVE-2026-5758\n","assigner":"certcc","epss":0.53,"enisaIdProduct":[{"id":"a7c0d329-0508-310d-848a-27ccb4989493","product":{"name":"Protocol-buffers-schema parser","vendor":{"name":"mafintosh"}},"product_version":"3.6.0 \u003c3.6.1"}],"enisaIdVendor":[{"id":"b6be3b87-c730-37ae-bffb-ec575fbf9806","vendor":{"name":"mafintosh"}}],"enisaIdVulnerability":[{"id":"a3ae5632-4635-365d-840a-4d720abf3142","vulnerability":{"id":"CVE-2026-5758","description":"JavaScript is vulnerable to prototype pollution in Mafintosh\u0027s protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution.","datePublished":"Apr 15, 2026, 5:20:13 PM","dateUpdated":"Apr 15, 2026, 6:55:45 PM","status":"PUBLISHED","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","references":"https://github.com/mafintosh/protocol-buffers-schema/pull/70\nhttps://morielharush.github.io/2026/04/12/cve-2026-5758-protocol-buffers-schema-prototype-pollution/\n","enisa_id":"EUVD-2026-22993\n","assigner":"certcc","epss":0.53,"dataProcessed":"Oct 28, 2026, 7:16:39 AM","vulnerabilityProduct":[{"id":"83b09992-45e0-3aae-80df-bea04d852809","product":{"name":"Protocol-buffers-schema parser","vendor":{"name":"mafintosh"}},"product_version":"3.6.0 \u003c3.6.1"}],"vulnerabilityVendor":[{"id":"2afdc4f8-3ba7-3f36-8db7-c11d6ad274a3","vendor":{"name":"mafintosh"}}]}}],"enisaIdAdvisory":[]}