CVE-2026-92779: falha de alta gravidade em BuilderIO @builder.io/sdk-angular
Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via Bindings
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 0.5%
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content blocks with binding keys containing __proto__, prototype, or constructor paths to pollute Object.prototype during rendering, affecting all subsequent objects created in the process including other tenants' renders.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N
Produtos afetados
BuilderIO · @builder.io/sdk-angularBuilderIO · @builder.io/sdk-qwikBuilderIO · @builder.io/sdk-reactBuilderIO · @builder.io/sdk-react-nextjsBuilderIO · @builder.io/sdk-solidBuilderIO · @builder.io/sdk-svelteBuilderIO · @builder.io/sdk-vueCVEs relacionadas — BuilderIO @builder.io/sdk-angular
No mesmo produto, das mais perigosas para as menos.
Referências
https://github.com/BuilderIO/builderhttps://github.com/BuilderIO/builder/blob/main/packages/sdks/src/functions/get-processed-block.ts#L84-L93https://github.com/BuilderIO/builder/blob/main/packages/sdks/src/functions/set.ts#L7-L26https://github.com/BuilderIO/builder/issues/4823https://www.vulncheck.com/advisories/builder-io-gen2-sdks-through-5.2.11-prototype-pollution-via-bindings