CVE-2026-97058 | alexei sprintf-js up to 1.1.3 toFixed format string

A vulnerability was found in alexei sprintf-js up to 1.1.3. It has been declared as problematic. This impacts the function toFixed. Such manipulation leads to format string.

This vulnerability is uniquely identified as CVE-2026-97058. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More