{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1774", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2026-02-02T17:01:20.831Z", "datePublished": "2026-02-10T15:38:03.265Z", "dateUpdated": "2026-02-10T16:22:54.320Z"}, "containers": {"cna": {"title": "CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability.", "descriptions": [{"lang": "en", "value": "CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "CASL Ability", "product": "CASL Ability", "versions": [{"status": "affected", "version": "2.4.0", "lessThanOrEqual": "6.7.4", "versionType": "custom"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')"}]}], "references": [{"url": "https://github.com/stalniy/casl/tree/master/packages/casl-ability"}, {"url": "https://cwe.mitre.org/data/definitions/1321.html"}, {"url": "https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/Prototype_pollution"}], "x_generator": {"engine": "VINCE 3.0.31", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-1774"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-02-10T15:59:23.902Z"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.kb.cert.org/vuls/id/458422"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-02-10T16:22:54.320Z"}}]}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability."}], "id": "CVE-2026-1774", "lastModified": "2026-02-10T21:51:48.077", "metrics": {}, "published": "2026-02-10T16:16:10.740", "references": [{"source": "cret@cert.org", "url": "https://cwe.mitre.org/data/definitions/1321.html"}, {"source": "cret@cert.org", "url": "https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/Prototype_pollution"}, {"source": "cret@cert.org", "url": "https://github.com/stalniy/casl/tree/master/packages/casl-ability"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.kb.cert.org/vuls/id/458422"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Awaiting Analysis"}

{}

{"created": "2026-02-10T21:42:11.106848+00:00", "updated": "2026-02-10T21:42:11.106966+00:00", "vendors": ["casl_ability", "casl_ability$PRODUCT$casl_ability"]}