{"schema":"vulnpedia.research/1","cve":"CVE-2026-111172","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/stalniy/casl/commit/58242cb3c7911c8a89bacfb7d732701d81bc1324","tags":["patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:57:56.567Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:57:56.567Z","url":"https://github.com/stalniy/casl/commit/58242cb3c7911c8a89bacfb7d732701d81bc1324"},{"source":"nvd","sourceId":"CVE-2026-111172","modified":"2026-10-16T18:25:45.343","url":"https://github.com/stalniy/casl/commit/58242cb3c7911c8a89bacfb7d732701d81bc1324"}]},{"url":"https://github.com/stalniy/casl/pull/1305","tags":["patch","issue-tracking"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:57:56.567Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:57:56.567Z","url":"https://github.com/stalniy/casl/pull/1305"},{"source":"nvd","sourceId":"CVE-2026-111172","modified":"2026-10-16T18:25:45.343","url":"https://github.com/stalniy/casl/pull/1305"}]},{"url":"https://github.com/stalniy/casl/blob/80f2380d03cfe9b162685d510ba8bc0ce83d0598/packages/casl-ability/src/utils.ts#L11-L29","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:57:56.567Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:57:56.567Z","url":"https://github.com/stalniy/casl/blob/80f2380d03cfe9b162685d510ba8bc0ce83d0598/packages/casl-ability/src/utils.ts#L11-L29"},{"source":"nvd","sourceId":"CVE-2026-111172","modified":"2026-10-16T18:25:45.343","url":"https://github.com/stalniy/casl/blob/80f2380d03cfe9b162685d510ba8bc0ce83d0598/packages/casl-ability/src/utils.ts#L11-L29"}]},{"url":"https://github.com/stalniy/casl","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:57:56.567Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:57:56.567Z","url":"https://github.com/stalniy/casl"},{"source":"nvd","sourceId":"CVE-2026-111172","modified":"2026-10-16T18:25:45.343","url":"https://github.com/stalniy/casl"}]},{"url":"https://www.vulncheck.com/advisories/casl-ability-6.7.5-before-7.0.2-prototype-pollution-via-rulestofields-setbypath","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:57:56.567Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-15T18:57:56.567Z","url":"https://www.vulncheck.com/advisories/casl-ability-6.7.5-before-7.0.2-prototype-pollution-via-rulestofields-setbypath"},{"source":"nvd","sourceId":"CVE-2026-111172","modified":"2026-10-16T18:25:45.343","url":"https://www.vulncheck.com/advisories/casl-ability-6.7.5-before-7.0.2-prototype-pollution-via-rulestofields-setbypath"}]},{"source":"euvd","sourceId":"EUVD-2026-102299","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102299","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102299","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102299"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}