CVE-2026-62517

The CVE-2026-62517 entry concerns the Oracle E-Business Suite Oracle Production Scheduling product (Internal Operations component). Affected are versions 12.2.3 through 12.2.15. The flaw is described as unauthenticated-over-network via HTTP with user interaction required, potentially allowing acc...

CVE-2026-62517

...

@afif_hh/composable (=1.0.2), @afif_hh/ui_components (>=1.0.5 <=1.0.30) +24 more potentially affected by CVE-2025-62517 via rollbar (>=2.10.0 <=2.26.4)

rollbar NPM version =2.10.0, =1.0.5, =1.0.0, =0.0.5, =0.0.2-beta.1, =0.5.4, =0.8.0, =2.0.0, =0.60.1, =0.20.0-beta.4, =1.0.0, =48.0.0, =1.0.0, =1.0.3 - bnjuilopjhgthtyi =99.99.99 and more Source cves: CVE-2025-62517 Source advisory: SNYK:JS-ROLLBAR-13703255...

CVE-2025-62517

Rollbar.js offers error tracking and logging from Javascript to Rollbar. In versions before 2.26.5 and from 3.0.0-alpha1 to before 3.0.0-beta5, there is a prototype pollution vulnerability in merge. If application code calls rollbar.configure with untrusted input, prototype pollution is possible...