CVE-2026-16150

The CVE affects RobinHerbots Inputmask (versions up to 5.0.9). The vulnerability arises in the Internal Deep Merge Helper’s extendDefaults/extendDefinitions/extendAliases in lib/dependencyLibs/extend.js, causing improperly controlled modification of object prototype attributes (prototype pollutio...

PT-2026-60982

Name of the Vulnerable Software and Affected Versions RobinHerbots Inputmask versions prior to 5.0.10 Description An issue exists in the Internal Deep Merge Helper component within the lib/dependencyLibs/extend.js library. The functions extendDefaults, extendDefinitions, and extendAliases allow f...