AZL-110400

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110400.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-110400

Upstream

CVE-2026-45325

Published

2026-07-16T17:16:56Z

Modified

2026-10-26T05:32:42Z

Summary

CVE-2026-45325 affecting package golang 1.26.7-1

Details

Gestor de Oferta is a web application for managing mobility service offerings. Prior to 20260509.0340.15, @tmlmobilidade/utils has a prototype pollution vulnerability in setValueAtPath() in packages/utils/src/generic/value-at-path.ts because unsafe path segments are not blocked. This issue is fixed in version 20260509.0340.15.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-45325

Affected packages

Azure Linux:3 / golang

Package

Name: golang
Purl: pkg:rpm/azure-linux/golang

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.26.7-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110400.json"