Product

Microsoft maker.js vulnerabilities

1 published CVE affecting Microsoft maker.js, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 1
High: 0
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest Microsoft maker.js CVEs

Newest publication first

CVE-2026-24888 Maker.js Vulnerable to Unsafe Property Copying in makerjs.extendObject
Published 2026-01-28

CriticalCVSS 9.8 EPSS 1.00%

Maker.js is a 2D vector line drawing and shape modeling for CNC and laser cutters. In versions up to and including 0.19.1, the makerjs.extendObject function copies properties from source objects without proper validation, potentially exposing applications to security risks. The f...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.