Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in oatpp up to 1.3.1. This impacts the function oatpp::data::type::ObjectWrapper::ObjectWrapper of the file src/oatpp/data/type/Type.hpp. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-1990 A security vulnerability has been detected in oatpp up to 1.3.1. This impacts the function oatpp::data::type::ObjectWrapper::ObjectWrapper of the file src/oatpp/data/ty… https://www.cve.org/CVERecord?id=CVE-2026-1990
Post summary
CVE-2026-1990 is a disclosed vulnerability affecting oatpp up to version 1.3.1, impacting the ObjectWrapper constructor, as detailed in the CVE record.
CVE-2026-1990 Null Pointer Dereference Vulnerability in oatpp Framework Up to 1.3.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1990
Post summary
A null pointer dereference vulnerability has been identified in the oatpp framework up to version 1.3.1, with no publicly available PoC or exploit, and no patches or workarounds mentioned yet.