{"vulnerability": "CVE-2026-61534", "sightings": [{"uuid": "c45ef911-f3b9-4b6e-bf0b-6ebde40a4936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61534", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvbno2ezrf25", "content": "CVE-2026-61534 - yayson\nThe yayson data library versions up to 4.2.0 accept JSON input that can overwrite the basic template used for every object in the program. By sending a specially crafted document, an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#yayson #jede #npm #CVE #infosec", "creation_timestamp": "2026-09-11T22:50:09.880865Z"}, {"uuid": "e5dfc866-62b6-4609-8f90-8b0b9f4facae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61534", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mvbruf6yp32g", "content": "Prototype pollution sails through while Prague waits for the memo\nPANIC 64% | Lag 0.0h | CVE-2026-61534 in yayson up to 4.2.0 lets a crafted JSON document overwrite the shared base template\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-12T00:05:18.061998Z"}, {"uuid": "cb9c3d1c-6cbc-449b-b678-d8680d5d5723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-61534", "type": "published-proof-of-concept", "source": "https://github.com/confetti/yayson/security/advisories/GHSA-325j-mg25-8q58", "content": "", "creation_timestamp": "2026-09-12T00:35:03.612108Z"}]}