{"id":"EUVD-2026-41138","enisaUuid":"22a87ee3-820b-30bc-8ee5-9121e08c450a","description":"Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. Versions prior to 4.12.26 are vulnerable to Prototype Pollution through Jodit.modules.Helpers.set(chain, value, obj), which walks the dot-separated chain, creating and following each path segment without filtering prototype-mutating keys. A chain that begins with (or contains) __proto__, constructor, or prototype lets the final assignment reach and mutate Object.prototype. Applications that pass a user-controlled or partially user-controlled key path into Jodit.modules.Helpers.set() could be vulnerable, causing unexpected property injection, logic bypass, denial of service, or secondary security issues. This issue has been fixed in version 4.12.26.","datePublished":"Jul 1, 2026, 8:25:43 PM","dateUpdated":"Jul 2, 2026, 12:22:32 PM","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/xdan/jodit/security/advisories/GHSA-vpmm-x3fm-qr5c\n","aliases":"CVE-2026-55886\nGHSA-vpmm-x3fm-qr5c\n","assigner":"GitHub_M","epss":0.53,"enisaIdProduct":[{"id":"14314819-731c-335d-9ae6-f7cf62a7db37","product":{"name":"jodit","vendor":{"name":"xdan"}},"product_version":"\u003c 4.12.26"}],"enisaIdVendor":[{"id":"30d3c3e6-4368-37e7-9daf-0fdfaf25c779","vendor":{"name":"xdan"}}],"enisaIdVulnerability":[{"id":"1a109dc7-3cb7-3b8b-87dc-7460fbb7a878","vulnerability":{"id":"CVE-2026-55886","description":"Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. Versions prior to 4.12.26 are vulnerable to Prototype Pollution through Jodit.modules.Helpers.set(chain, value, obj), which walks the dot-separated chain, creating and following each path segment without filtering prototype-mutating keys. A chain that begins with (or contains) __proto__, constructor, or prototype lets the final assignment reach and mutate Object.prototype. Applications that pass a user-controlled or partially user-controlled key path into Jodit.modules.Helpers.set() could be vulnerable, causing unexpected property injection, logic bypass, denial of service, or secondary security issues. This issue has been fixed in version 4.12.26.","datePublished":"Jul 1, 2026, 8:25:43 PM","dateUpdated":"Jul 2, 2026, 12:22:32 PM","status":"PUBLISHED","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/xdan/jodit/security/advisories/GHSA-vpmm-x3fm-qr5c\n","enisa_id":"EUVD-2026-41138\n","assigner":"GitHub_M","epss":0.53,"dataProcessed":"Nov 7, 2026, 7:21:17 AM","vulnerabilityProduct":[{"id":"32ab6169-6196-3ad1-ac7a-3b83ad72c8d6","product":{"name":"jodit","vendor":{"name":"xdan"}},"product_version":"\u003c 4.12.26"}],"vulnerabilityVendor":[{"id":"bc5b9434-9c05-3bb2-afa9-71f8ddb676df","vendor":{"name":"xdan"}}]}},{"id":"5f585774-dd69-350f-95ff-2b2ed754c945","vulnerability":{"id":"GHSA-vpmm-x3fm-qr5c","description":"jodit: Prototype pollution in Jodit via Jodit.modules.Helpers.set()","datePublished":"Jun 18, 2026, 1:05:01 PM","dateUpdated":"Jul 31, 2026, 2:32:34 PM","baseScore":0.0,"references":"https://github.com/xdan/jodit/security/advisories/GHSA-vpmm-x3fm-qr5c\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-55886\nhttps://github.com/xdan/jodit\n","enisa_id":"EUVD-2026-41138\n","aliases":"CVE-2026-55886\nGHSA-vpmm-x3fm-qr5c\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}