CVE-2026-24888
1 advisory.
npm/makerjs CVE-2026-24888: medium 6.5, EPSS 1.01%
Maker.js has Unsafe Property Copying in makerjs.extendObject
Action: Upgrade makerjs to 0.19.2 or later.
npm i makerjs@0.19.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.19.2 | - |
Fixed versions
| 0.19.2 |
Sources
- osv: GHSA-2cp6-34r9-54xx
- https://github.com/microsoft/maker.js/security/advisories/GHSA-2cp6-34r9-54xx
- https://nvd.nist.gov/vuln/detail/CVE-2026-24888
- https://github.com/microsoft/maker.js/commit/85e0f12bd868974b891601a141974f929dec36b8
- https://github.com/microsoft/maker.js
- https://github.com/microsoft/maker.js/blob/98cffa82a372ff942194c925a12a311253587167/packages/maker.js/src/core/maker.ts#L232-L241
CVE-2026-24888 · published · modified · JSON