CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-24888

Maker.js is a 2D vector line drawing and shape modeling for CNC and laser cutters. In versions up to and including 0.19.1, the `makerjs.extendObject` function copies properties from source objects without proper validation, potentially exposing applications to security risks. The function lacks `hasOwnProperty()` checks and does not filter dangerous keys, allowing inherited properties and potentially malicious properties to be copied to target objects. A patch is available in commit 85e0f12bd868974b891601a141974f929dec36b8, which is expected to be part of version 0.19.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 43.4%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2026-24888

Microsoft » Maker.js » Version: 0.0.1

cpe:2.3:a:microsoft:maker.js:0.0.1
Microsoft » Maker.js » Version: 0.1.0

cpe:2.3:a:microsoft:maker.js:0.1.0
Microsoft » Maker.js » Version: 0.1.1

cpe:2.3:a:microsoft:maker.js:0.1.1
Microsoft » Maker.js » Version: 0.1.2

cpe:2.3:a:microsoft:maker.js:0.1.2
Microsoft » Maker.js » Version: 0.1.3

cpe:2.3:a:microsoft:maker.js:0.1.3
Microsoft » Maker.js » Version: 0.1.4

cpe:2.3:a:microsoft:maker.js:0.1.4
Microsoft » Maker.js » Version: 0.1.5

cpe:2.3:a:microsoft:maker.js:0.1.5
Microsoft » Maker.js » Version: 0.10.0

cpe:2.3:a:microsoft:maker.js:0.10.0
Microsoft » Maker.js » Version: 0.10.1

cpe:2.3:a:microsoft:maker.js:0.10.1
Microsoft » Maker.js » Version: 0.10.3

cpe:2.3:a:microsoft:maker.js:0.10.3
Microsoft » Maker.js » Version: 0.10.4

cpe:2.3:a:microsoft:maker.js:0.10.4
Microsoft » Maker.js » Version: 0.11.0

cpe:2.3:a:microsoft:maker.js:0.11.0
Microsoft » Maker.js » Version: 0.11.1

cpe:2.3:a:microsoft:maker.js:0.11.1
Microsoft » Maker.js » Version: 0.11.2

cpe:2.3:a:microsoft:maker.js:0.11.2
Microsoft » Maker.js » Version: 0.12.0

cpe:2.3:a:microsoft:maker.js:0.12.0
Microsoft » Maker.js » Version: 0.12.1

cpe:2.3:a:microsoft:maker.js:0.12.1
Microsoft » Maker.js » Version: 0.13.0

cpe:2.3:a:microsoft:maker.js:0.13.0
Microsoft » Maker.js » Version: 0.13.1

cpe:2.3:a:microsoft:maker.js:0.13.1
Microsoft » Maker.js » Version: 0.14.0

cpe:2.3:a:microsoft:maker.js:0.14.0
Microsoft » Maker.js » Version: 0.15.0

cpe:2.3:a:microsoft:maker.js:0.15.0
Microsoft » Maker.js » Version: 0.16.0

cpe:2.3:a:microsoft:maker.js:0.16.0
Microsoft » Maker.js » Version: 0.17.0

cpe:2.3:a:microsoft:maker.js:0.17.0
Microsoft » Maker.js » Version: 0.17.1

cpe:2.3:a:microsoft:maker.js:0.17.1
Microsoft » Maker.js » Version: 0.17.2

cpe:2.3:a:microsoft:maker.js:0.17.2
Microsoft » Maker.js » Version: 0.17.3

cpe:2.3:a:microsoft:maker.js:0.17.3
Microsoft » Maker.js » Version: 0.17.4

cpe:2.3:a:microsoft:maker.js:0.17.4
Microsoft » Maker.js » Version: 0.17.5

cpe:2.3:a:microsoft:maker.js:0.17.5
Microsoft » Maker.js » Version: 0.17.6

cpe:2.3:a:microsoft:maker.js:0.17.6
Microsoft » Maker.js » Version: 0.18.0

cpe:2.3:a:microsoft:maker.js:0.18.0
Microsoft » Maker.js » Version: 0.18.1

cpe:2.3:a:microsoft:maker.js:0.18.1
Microsoft » Maker.js » Version: 0.18.2

cpe:2.3:a:microsoft:maker.js:0.18.2
Microsoft » Maker.js » Version: 0.19.1

cpe:2.3:a:microsoft:maker.js:0.19.1
Microsoft » Maker.js » Version: 0.2.0

cpe:2.3:a:microsoft:maker.js:0.2.0
Microsoft » Maker.js » Version: 0.2.1

cpe:2.3:a:microsoft:maker.js:0.2.1
Microsoft » Maker.js » Version: 0.2.2

cpe:2.3:a:microsoft:maker.js:0.2.2
Microsoft » Maker.js » Version: 0.3.0

cpe:2.3:a:microsoft:maker.js:0.3.0
Microsoft » Maker.js » Version: 0.3.1

cpe:2.3:a:microsoft:maker.js:0.3.1
Microsoft » Maker.js » Version: 0.3.2

cpe:2.3:a:microsoft:maker.js:0.3.2
Microsoft » Maker.js » Version: 0.3.3

cpe:2.3:a:microsoft:maker.js:0.3.3
Microsoft » Maker.js » Version: 0.4.0

cpe:2.3:a:microsoft:maker.js:0.4.0
Microsoft » Maker.js » Version: 0.4.1

cpe:2.3:a:microsoft:maker.js:0.4.1
Microsoft » Maker.js » Version: 0.4.2

cpe:2.3:a:microsoft:maker.js:0.4.2
Microsoft » Maker.js » Version: 0.4.3

cpe:2.3:a:microsoft:maker.js:0.4.3
Microsoft » Maker.js » Version: 0.5.0

cpe:2.3:a:microsoft:maker.js:0.5.0
Microsoft » Maker.js » Version: 0.5.1

cpe:2.3:a:microsoft:maker.js:0.5.1
Microsoft » Maker.js » Version: 0.5.2

cpe:2.3:a:microsoft:maker.js:0.5.2
Microsoft » Maker.js » Version: 0.5.3

cpe:2.3:a:microsoft:maker.js:0.5.3
Microsoft » Maker.js » Version: 0.6.1

cpe:2.3:a:microsoft:maker.js:0.6.1
Microsoft » Maker.js » Version: 0.6.10

cpe:2.3:a:microsoft:maker.js:0.6.10
Microsoft » Maker.js » Version: 0.6.2

cpe:2.3:a:microsoft:maker.js:0.6.2
Microsoft » Maker.js » Version: 0.6.3

cpe:2.3:a:microsoft:maker.js:0.6.3
Microsoft » Maker.js » Version: 0.6.5

cpe:2.3:a:microsoft:maker.js:0.6.5
Microsoft » Maker.js » Version: 0.6.6

cpe:2.3:a:microsoft:maker.js:0.6.6
Microsoft » Maker.js » Version: 0.6.7

cpe:2.3:a:microsoft:maker.js:0.6.7
Microsoft » Maker.js » Version: 0.6.8

cpe:2.3:a:microsoft:maker.js:0.6.8
Microsoft » Maker.js » Version: 0.6.9

cpe:2.3:a:microsoft:maker.js:0.6.9
Microsoft » Maker.js » Version: 0.7.0

cpe:2.3:a:microsoft:maker.js:0.7.0
Microsoft » Maker.js » Version: 0.7.2

cpe:2.3:a:microsoft:maker.js:0.7.2
Microsoft » Maker.js » Version: 0.7.3

cpe:2.3:a:microsoft:maker.js:0.7.3
Microsoft » Maker.js » Version: 0.7.4

cpe:2.3:a:microsoft:maker.js:0.7.4
Microsoft » Maker.js » Version: 0.7.5

cpe:2.3:a:microsoft:maker.js:0.7.5
Microsoft » Maker.js » Version: 0.7.6

cpe:2.3:a:microsoft:maker.js:0.7.6
Microsoft » Maker.js » Version: 0.7.7

cpe:2.3:a:microsoft:maker.js:0.7.7
Microsoft » Maker.js » Version: 0.8.0

cpe:2.3:a:microsoft:maker.js:0.8.0
Microsoft » Maker.js » Version: 0.8.1

cpe:2.3:a:microsoft:maker.js:0.8.1
Microsoft » Maker.js » Version: 0.9.0

cpe:2.3:a:microsoft:maker.js:0.9.0
Microsoft » Maker.js » Version: 0.9.1

cpe:2.3:a:microsoft:maker.js:0.9.1
Microsoft » Maker.js » Version: 0.9.10

cpe:2.3:a:microsoft:maker.js:0.9.10
Microsoft » Maker.js » Version: 0.9.11

cpe:2.3:a:microsoft:maker.js:0.9.11
Microsoft » Maker.js » Version: 0.9.12

cpe:2.3:a:microsoft:maker.js:0.9.12
Microsoft » Maker.js » Version: 0.9.13

cpe:2.3:a:microsoft:maker.js:0.9.13
Microsoft » Maker.js » Version: 0.9.14

cpe:2.3:a:microsoft:maker.js:0.9.14
Microsoft » Maker.js » Version: 0.9.15

cpe:2.3:a:microsoft:maker.js:0.9.15
Microsoft » Maker.js » Version: 0.9.16

cpe:2.3:a:microsoft:maker.js:0.9.16
Microsoft » Maker.js » Version: 0.9.17

cpe:2.3:a:microsoft:maker.js:0.9.17
Microsoft » Maker.js » Version: 0.9.18

cpe:2.3:a:microsoft:maker.js:0.9.18
Microsoft » Maker.js » Version: 0.9.19

cpe:2.3:a:microsoft:maker.js:0.9.19
Microsoft » Maker.js » Version: 0.9.20

cpe:2.3:a:microsoft:maker.js:0.9.20
Microsoft » Maker.js » Version: 0.9.21

cpe:2.3:a:microsoft:maker.js:0.9.21
Microsoft » Maker.js » Version: 0.9.22

cpe:2.3:a:microsoft:maker.js:0.9.22
Microsoft » Maker.js » Version: 0.9.23

cpe:2.3:a:microsoft:maker.js:0.9.23
Microsoft » Maker.js » Version: 0.9.24

cpe:2.3:a:microsoft:maker.js:0.9.24
Microsoft » Maker.js » Version: 0.9.3

cpe:2.3:a:microsoft:maker.js:0.9.3
Microsoft » Maker.js » Version: 0.9.31

cpe:2.3:a:microsoft:maker.js:0.9.31
Microsoft » Maker.js » Version: 0.9.32

cpe:2.3:a:microsoft:maker.js:0.9.32
Microsoft » Maker.js » Version: 0.9.33

cpe:2.3:a:microsoft:maker.js:0.9.33
Microsoft » Maker.js » Version: 0.9.34

cpe:2.3:a:microsoft:maker.js:0.9.34
Microsoft » Maker.js » Version: 0.9.35

cpe:2.3:a:microsoft:maker.js:0.9.35
Microsoft » Maker.js » Version: 0.9.36

cpe:2.3:a:microsoft:maker.js:0.9.36
Microsoft » Maker.js » Version: 0.9.37

cpe:2.3:a:microsoft:maker.js:0.9.37
Microsoft » Maker.js » Version: 0.9.38

cpe:2.3:a:microsoft:maker.js:0.9.38
Microsoft » Maker.js » Version: 0.9.39

cpe:2.3:a:microsoft:maker.js:0.9.39
Microsoft » Maker.js » Version: 0.9.4

cpe:2.3:a:microsoft:maker.js:0.9.4
Microsoft » Maker.js » Version: 0.9.40

cpe:2.3:a:microsoft:maker.js:0.9.40
Microsoft » Maker.js » Version: 0.9.41

cpe:2.3:a:microsoft:maker.js:0.9.41
Microsoft » Maker.js » Version: 0.9.42

cpe:2.3:a:microsoft:maker.js:0.9.42
Microsoft » Maker.js » Version: 0.9.43

cpe:2.3:a:microsoft:maker.js:0.9.43
Microsoft » Maker.js » Version: 0.9.44

cpe:2.3:a:microsoft:maker.js:0.9.44
Microsoft » Maker.js » Version: 0.9.45

cpe:2.3:a:microsoft:maker.js:0.9.45
Microsoft » Maker.js » Version: 0.9.46

cpe:2.3:a:microsoft:maker.js:0.9.46
Microsoft » Maker.js » Version: 0.9.47

cpe:2.3:a:microsoft:maker.js:0.9.47
Microsoft » Maker.js » Version: 0.9.48

cpe:2.3:a:microsoft:maker.js:0.9.48
Microsoft » Maker.js » Version: 0.9.49

cpe:2.3:a:microsoft:maker.js:0.9.49
Microsoft » Maker.js » Version: 0.9.5

cpe:2.3:a:microsoft:maker.js:0.9.5
Microsoft » Maker.js » Version: 0.9.50

cpe:2.3:a:microsoft:maker.js:0.9.50
Microsoft » Maker.js » Version: 0.9.51

cpe:2.3:a:microsoft:maker.js:0.9.51
Microsoft » Maker.js » Version: 0.9.52

cpe:2.3:a:microsoft:maker.js:0.9.52
Microsoft » Maker.js » Version: 0.9.53

cpe:2.3:a:microsoft:maker.js:0.9.53
Microsoft » Maker.js » Version: 0.9.54

cpe:2.3:a:microsoft:maker.js:0.9.54
Microsoft » Maker.js » Version: 0.9.55

cpe:2.3:a:microsoft:maker.js:0.9.55
Microsoft » Maker.js » Version: 0.9.56

cpe:2.3:a:microsoft:maker.js:0.9.56
Microsoft » Maker.js » Version: 0.9.57

cpe:2.3:a:microsoft:maker.js:0.9.57
Microsoft » Maker.js » Version: 0.9.58

cpe:2.3:a:microsoft:maker.js:0.9.58
Microsoft » Maker.js » Version: 0.9.59

cpe:2.3:a:microsoft:maker.js:0.9.59
Microsoft » Maker.js » Version: 0.9.6

cpe:2.3:a:microsoft:maker.js:0.9.6
Microsoft » Maker.js » Version: 0.9.60

cpe:2.3:a:microsoft:maker.js:0.9.60
Microsoft » Maker.js » Version: 0.9.62

cpe:2.3:a:microsoft:maker.js:0.9.62
Microsoft » Maker.js » Version: 0.9.63

cpe:2.3:a:microsoft:maker.js:0.9.63
Microsoft » Maker.js » Version: 0.9.64

cpe:2.3:a:microsoft:maker.js:0.9.64
Microsoft » Maker.js » Version: 0.9.65

cpe:2.3:a:microsoft:maker.js:0.9.65
Microsoft » Maker.js » Version: 0.9.66

cpe:2.3:a:microsoft:maker.js:0.9.66
Microsoft » Maker.js » Version: 0.9.67

cpe:2.3:a:microsoft:maker.js:0.9.67
Microsoft » Maker.js » Version: 0.9.68

cpe:2.3:a:microsoft:maker.js:0.9.68
Microsoft » Maker.js » Version: 0.9.69

cpe:2.3:a:microsoft:maker.js:0.9.69
Microsoft » Maker.js » Version: 0.9.7

cpe:2.3:a:microsoft:maker.js:0.9.7
Microsoft » Maker.js » Version: 0.9.70

cpe:2.3:a:microsoft:maker.js:0.9.70
Microsoft » Maker.js » Version: 0.9.71

cpe:2.3:a:microsoft:maker.js:0.9.71
Microsoft » Maker.js » Version: 0.9.73

cpe:2.3:a:microsoft:maker.js:0.9.73
Microsoft » Maker.js » Version: 0.9.74

cpe:2.3:a:microsoft:maker.js:0.9.74
Microsoft » Maker.js » Version: 0.9.75

cpe:2.3:a:microsoft:maker.js:0.9.75
Microsoft » Maker.js » Version: 0.9.76

cpe:2.3:a:microsoft:maker.js:0.9.76
Microsoft » Maker.js » Version: 0.9.77

cpe:2.3:a:microsoft:maker.js:0.9.77
Microsoft » Maker.js » Version: 0.9.78

cpe:2.3:a:microsoft:maker.js:0.9.78
Microsoft » Maker.js » Version: 0.9.79

cpe:2.3:a:microsoft:maker.js:0.9.79
Microsoft » Maker.js » Version: 0.9.8

cpe:2.3:a:microsoft:maker.js:0.9.8
Microsoft » Maker.js » Version: 0.9.81

cpe:2.3:a:microsoft:maker.js:0.9.81
Microsoft » Maker.js » Version: 0.9.82

cpe:2.3:a:microsoft:maker.js:0.9.82
Microsoft » Maker.js » Version: 0.9.83

cpe:2.3:a:microsoft:maker.js:0.9.83
Microsoft » Maker.js » Version: 0.9.84

cpe:2.3:a:microsoft:maker.js:0.9.84
Microsoft » Maker.js » Version: 0.9.85

cpe:2.3:a:microsoft:maker.js:0.9.85
Microsoft » Maker.js » Version: 0.9.86

cpe:2.3:a:microsoft:maker.js:0.9.86
Microsoft » Maker.js » Version: 0.9.87

cpe:2.3:a:microsoft:maker.js:0.9.87
Microsoft » Maker.js » Version: 0.9.88

cpe:2.3:a:microsoft:maker.js:0.9.88
Microsoft » Maker.js » Version: 0.9.89

cpe:2.3:a:microsoft:maker.js:0.9.89
Microsoft » Maker.js » Version: 0.9.9

cpe:2.3:a:microsoft:maker.js:0.9.9
Microsoft » Maker.js » Version: 0.9.90

cpe:2.3:a:microsoft:maker.js:0.9.90
Microsoft » Maker.js » Version: 0.9.91

cpe:2.3:a:microsoft:maker.js:0.9.91
Microsoft » Maker.js » Version: 0.9.92

cpe:2.3:a:microsoft:maker.js:0.9.92
Microsoft » Maker.js » Version: 0.9.93

cpe:2.3:a:microsoft:maker.js:0.9.93

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-24888

Products

Pricing

Contact Us