Approved changes feed: RSS · Atom

cpe:2.3:a:sagold:json-schema-library:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSagold (81995702-3475-542f-962f-d3232c4b8cab)
ProductJson Schema Library (da04d55a-c833-5689-ac02-8c3aea9a60fa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-16008 vulnerable 2026-07-29 00:26:18.517886 sagold json-schema-library propertyDependencies.ts parsePropertyDependencies prototype pollution
MEDIUM (6.3)
A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. The attack can be initiated remotely. Upgrading to version 11.6.0 will fix this issue. The identifier of the patch is 432287ee6f68a02ce6f015354618486ec427a32d. It is advisable to upgrade the affected component.
Published: 2026-07-17T10:30:10.843Z
Updated: 2026-07-17T11:59:04.607Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.