CVE-2026-16008 | sagold json-schema-library 11.5.0/11.5.1 propertyDependencies.ts parsePropertyDependencies prototype pollution (Issue 111)

A vulnerability, which was classified as problematic, has been found in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes.

This vulnerability is documented as CVE-2026-16008. The attack can be initiated remotely. Additionally, an exploit exists.

It is advisable to upgrade the affected component.