CVE-2026-55886 — Prototype pollution in Jodit via Jodit.modules.Helpers.set()

Jodit contains a prototype-pollution vulnerability (CWE-1321). Jodit.modules.Helpers.set() can modify Object.prototype when a key path contains __proto__, constructor, or prototype. A fix is available in version 4.12.26.