CVE-2026-112309

The @rvf/set-get library (versions before 7.0.4 ) is vulnerable to a prototype pollution vulnerability within the setPath function. This flaw allows unauthenticated attackers to overwrite properties of shared built-in functions by leveraging inherited Object.prototype methods. Specifically, an at...