CVE-2026-92779 in sdk-angular
요약
\~에 의해 VulDB • 2026. 09. 16.
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content blocks with binding keys containing __proto__, prototype, or constructor paths to pollute Object.prototype during rendering, affecting all subsequent objects created in the process including other tenants' renders.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.