CVE-2026-113666 | Apostrophe Apostrophe/db-connect unsetNestedField prototype pollution (EUVD-2026-105214)

October 20, 2026 Yanac

A vulnerability described as critical has been identified in Apostrophe Apostrophe and db-connect. Affected is the function unsetNestedField of the component db-connect. Executing a manipulation can lead to improperly controlled modification of object prototype attributes.

This vulnerability appears as CVE-2026-113666. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More