Lucene search
+L

CVE-2026-24888

🗓️ 30 Jan 2026 03:24:32Reported by redhat.comType 
redhatcve
 redhatcve
🔗 access.redhat.com👁 11 Views

Maker.js extendObject copies properties without validation in versions up to 0.19.1, allowing inherited or dangerous keys; fix included in 0.19.2.

Related
Refs
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2026-24888
28 Jan 202621:35
attackerkb
circl
Circl
CVE-2026-24888
28 Jan 202616:37
circl
cnnvd
CNNVD
Maker.js security vulnerabilities
28 Jan 202600:00
cnnvd
cve
CVE
CVE-2026-24888
28 Jan 202621:35
cve
cvelist
Cvelist
CVE-2026-24888 Maker.js Vulnerable to Unsafe Property Copying in makerjs.extendObject
28 Jan 202621:35
cvelist
euvd
EUVD
EUVD-2026-4851
29 Jan 202615:18
euvd
github
Github Security Blog
Maker.js has Unsafe Property Copying in makerjs.extendObject
29 Jan 202615:18
github
nvd
NVD
CVE-2026-24888
28 Jan 202622:15
nvd
osv
OSV
GHSA-2CP6-34R9-54XX Maker.js has Unsafe Property Copying in makerjs.extendObject
29 Jan 202615:18
osv
ptsecurity
Positive Technologies
PT-2026-5230
28 Jan 202600:00
ptsecurity
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Jan 2026 03:24Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.16.5 - 9.8
EPSS0.00879
SSVC
11