Skip to content
OpenAdvisories

Product · RobinHerbots

Inputmask

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-16150

    RobinHerbots Inputmask Internal Deep Merge Helper extend.js extendAliases prototype pollution

    A vulnerability was found in RobinHerbots Inputmask up to 5.0.9. Affected by this issue is the function extendDefaults/extendDefinitions/extendAliases in the library lib/dependencyLibs/extend.js of the component Internal Deep Merge Helper. The manipulation re…

    RobinHerbots Inputmask