{
  "cve": "CVE-2026-8657",
  "issue": "prototype pollution in jsondiffpatch patch()",
  "vulnerable_version": "0.7.5",
  "fixed_version": "0.7.6",
  "exploitable_vectors": [
    "jsondiffpatch.patch() with __proto__ delta key",
    "jsondiffpatch.patch() with constructor.prototype delta key",
    "jsonpatchFormatter.patch() add op with __proto__ path",
    "jsonpatchFormatter.patch() replace op with __proto__ path",
    "jsondiffpatch.unpatch() with constructor.prototype delta key"
  ],
  "reproduced": true
}