Vulnerability Description
A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. The attack can be initiated remotely. Upgrading to version 11.6.0 will fix this issue. The identifier of the patch is 432287ee6f68a02ce6f015354618486ec427a32d. It is advisable to upgrade the affected component.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/sagold/json-schema-library/
- https://github.com/sagold/json-schema-library/commit/432287ee6f68a02ce6f01535461
- https://github.com/sagold/json-schema-library/issues/111
- https://github.com/sagold/json-schema-library/releases/tag/v11.6.0
- https://vuldb.com/cve/CVE-2026-16008
- https://vuldb.com/submit/856721
- https://vuldb.com/vuln/379752
- https://vuldb.com/vuln/379752/cti
- https://github.com/sagold/json-schema-library/issues/111
FAQ
What is CVE-2026-16008?
CVE-2026-16008 is a vulnerability with a CVSS score of 6.3 (MEDIUM). A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipu...
How severe is CVE-2026-16008?
CVE-2026-16008 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-16008?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.