VYPR

Gen2 SDKs

by Builderio

CVEs (1)

  • CVE-2026-92779HigSep 16, 2026
    risk 0.49cvss 7.6epss 0.00

    Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content blocks with binding keys containing __proto__, prototype, or…