CVE-2026-8657 | jsondiffpatch up to 0.7.5 jsonpatch.patch jsondiffpatch.patch prototype pollution (SNYK-JS-JSONDIFFPATCH-16322990)

A vulnerability was found in jsondiffpatch up to 0.7.5 and classified as critical. This vulnerability affects the function jsondiffpatch.patch of the file jsondiffpatch/formatters/jsonpatch.patch. Executing a manipulation can lead to improperly controlled modification of object prototype attributes.

This vulnerability is tracked as CVE-2026-8657. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.