AIKIDO-2026-10450

TL;DR

Affected versions of z-schema are vulnerable to prototype pollution due to unsafe handling of user-controlled schema properties during schema compilation. The implementation allows special property names such as __proto__, constructor, or prototype to be assigned directly onto internal objects without validation. An attacker can supply a crafted schema containing these keys, resulting in modification of Object.prototype and pollution of subsequently created objects.