Cloudanix VulnDB

CVE-2026-5758

Medium · 6.5

CVSS

6.5

EPSS

0.7%

Published

Apr 15, 2026

CISA due date

—

The record

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution.

Affected packages

Ecosystem Package Introduced Fixed
npm protocol-buffers-schema 0 3.6.1

Related vulnerabilities