CVE-2026-1990

Name of the Vulnerable Software and Affected Versions oatpp versions up to 1.3.1

Description A security issue has been identified in oatpp. The issue involves a null pointer dereference within the oatpp::data::type::ObjectWrapper::ObjectWrapper() function located in the src/oatpp/data/type/Type.hpp file. Local access is required for exploitation. The details of the issue have been publicly disclosed. The project was notified of the problem but has not yet responded.

Recommendations Versions prior to 1.3.1 should be used. As a temporary workaround, consider avoiding the use of the oatpp::data::type::ObjectWrapper::ObjectWrapper() function until a patch is available.