{"uuid": "bd5c84c8-1f47-437c-8c38-a54e63c1cc4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8657", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116587326764358912", "content": "\u26a0\ufe0f HIGH severity: CVE-2026-8657 in jsondiffpatch &lt;0.7.6 enables remote prototype pollution via patch APIs. Patch status unconfirmed \u2014 avoid untrusted input &amp; monitor vendor updates. Details: https://radar.offseq.com/threat/cve-2026-8657-prototype-pollution-in-jsondiffpatch-73cb7b51 #OffSeq #infosec #NodeJS #vuln", "creation_timestamp": "2026-05-17T01:30:47.765937Z"}