CVE-2026-103918 | middleapi oRPC up to 1.14.9 ZodSmartCoercionPlugin __proto__ improperly controlled sequential memory allocation

SecurityVulns
Yanac

A vulnerability categorized as critical has been discovered in middleapi oRPC up to 1.14.9. This vulnerability affects unknown code of the component ZodSmartCoercionPlugin. Executing a manipulation of the argument __proto__ can lead to improperly controlled sequential memory allocation.

This vulnerability appears as CVE-2026-103918. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More