CVE-2026-16008
Medium · 6.3CVSS
6.3
EPSS
0.3%
Published
Jul 17, 2026
CISA due date
—
The record
A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. The attack can be initiated remotely. Upgrading to version 11.6.0 will fix this issue. The identifier of the patch is 432287ee6f68a02ce6f015354618486ec427a32d. It is advisable to upgrade the affected component.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-115878 Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and… CWE-94
- CVE-2026-115731 Deserialization of untrusted data in the report-processing code of Puppet, as used by… CWE-94
- CVE-2026-63471 fastapi-code-generator creates FastAPI applications from OpenAPI files. CWE-94
- CVE-2026-63470 fastapi-code-generator creates FastAPI applications from OpenAPI files. CWE-94
- CVE-2026-63469 fastapi-code-generator creates FastAPI applications from OpenAPI files. CWE-94
- CVE-2026-44267 Elo is a purely functional expression language for no-code tools. CWE-94
- CVE-2026-44266 Elo is a purely functional expression language for no-code tools. CWE-94
- CVE-2026-44265 Elo is a purely functional expression language for no-code tools. CWE-94