CVE-2026-61534

creationtimestamp| type| source ---|---|--- 2026-09-11 22:50:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvbno2ezrf25 2026-09-12 00:05:18+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mvbruf6yp32g 2026-09-12 00:35:03+00:00|...

NPM: yayson: Prototype pollution in Store/LegacyStore deserialization

NPM: yayson: Prototype pollution in Store/LegacyStore deserialization vulnerability discovered by ? in WordPress Npm yayson versions = 4.2.0...

GHSA-325J-MG25-8Q58 yayson: Prototype pollution in Store/LegacyStore deserialization

Summary Store/LegacyStore key internal lookup tables by the type, id, and relationship names from a JSON:API document. Because these were plain objects, a document with type: "proto" writes onto Object.prototype, polluting every object in the process. Severity Suggested CVSS v3.1...

yayson: Prototype pollution in Store/LegacyStore deserialization

Summary Store/LegacyStore key internal lookup tables by the type, id, and relationship names from a JSON:API document. Because these were plain objects, a document with type: "proto" writes onto Object.prototype, polluting every object in the process. Severity Suggested CVSS v3.1...

PT-2026-90549

Summary Store/LegacyStore key internal lookup tables by the type, id, and relationship names from a JSON:API document. Because these were plain objects, a document with type: " proto " writes onto Object.prototype, polluting every object in the process. Severity Suggested CVSS v3.1...