CVE Intelligence

Vulnerabilidades do Alibaba-fusion Next

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Alibaba-fusion Next: 1 registro(s), com versões afetadas e correções.

CVE-2026-78180 Alta · 7.3 CWE-94 24/08/2026
alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution
A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider.getContextProps of the file components/dialog/index.tsx of the component deepMerge. Performing a manipulation of the argument locale results in improperly controlled modification of object prototype attributes. The attack may be initiated remotely. The reported GitHub issue was closed automatically due to inactivity.