> CVE-2026-5758

« BACK_TO_HOME
PUBLISHED
2026-04-15 18:17
MODIFIED
2026-04-15 18:17
EPSS (Prob. Exploit)
0.69%
Top 47.8%
DATA SOURCES:
NVD 🔗 2026-04-15 RED HAT 🔗 2026-04-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-05 OSV 🔗 2026-09-13

> DESCRIPTION

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> GITHUB SECURITY ADVISORY

GHSA-x7rj-f32v-7jjg HIGH

Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS

AFFECTED PACKAGES:
COMPOSER / phalcon/cphalcon
<= 5.14.2
Fixed in: 5.15.0

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution

AFFECTED PACKAGES:
Unknown / Unknown
1 versions affected
ALIASES:
GHSA-j452-xhg8-qg39

> HISTORIQUE DES MODIFICATIONS

Première apparition
15/04/2026 18:17
Source: NVD
📊 ENRICHISSEMENT 19/04/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 19/04/2026 05:01
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 2 Dernière mise à jour: 6 months ago

> REFERENCES

https://github.com/mafintosh/protocol-buffers-schema/pull/70
https://morielharush.github.io/2026/04/12/cve-2026-5758-protocol-buffers-schema-...
« BACK_TO_HOME