CVE-2026-61834 Details

A prototype pollution vulnerability has been identified in the scim-patch library, prior to version 0.9.2. The issue arises because the navigate() function reads inherited properties, and the assign() function improperly checks prototype-chain membership when resolving SCIM PATCH paths controlled by an attacker. This allows for traversal into shared built-in function objects, such as toString, where attacker-controlled properties can be added. The resulting process-global mutation may disrupt application logic that relies on inherited method properties.

Users are advised to update to scim-patch version 0.9.2 or later, and to ensure that SCIM PATCH operations do not traverse inherited properties. Instead, use own-property checks to verify the existence of keys and create missing containers only for safe own keys.