CVE-2026-16008

Description

A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. The attack can be initiated remotely. Upgrading to version 11.6.0 will fix this issue. The identifier of the patch is 432287ee6f68a02ce6f015354618486ec427a32d. It is advisable to upgrade the affected component.

References

https://vuldb.com/vuln/379752/cti

https://vuldb.com/vuln/379752

https://vuldb.com/submit/856721

https://vuldb.com/cve/CVE-2026-16008

https://github.com/sagold/json-schema-library/releases/tag/v11.6.0

https://github.com/sagold/json-schema-library/issues/111

https://github.com/sagold/json-schema-library/commit/432287ee6f68a02ce6f015354618486ec427a32d

https://github.com/sagold/json-schema-library/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4