CVE-2026-78178

Name of the Vulnerable Software and Affected Versions jQWidgets versions prior to 24.0.2

Description A remote attack can cause improperly controlled modification of object prototype attributes, a condition known as prototype pollution. This issue occurs within the JQXLite.extend/jqxBaseFramework.extend functions located in the jqwidgets/jqx-all.js file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the JQXLite.extend/jqxBaseFramework.extend functions to minimize the risk of exploitation.