Lucene search
GoogleOSV:GHSA-896R-F27R-55MWHistoryNov 19, 2021 - 8:16 p.m.
json-schema is vulnerable to Prototype Pollution
2021-11-1920:16:17
Google
osv.dev
53
0.005 Low
EPSS
Percentile
75.7%
json-schema before version 0.4.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes (‘Prototype Pollution’).
| CPE | Name | Operator | Version |
|---|---|---|---|
| json-schema | lt | 0.4.0 |
References
github.com/kriszyp/json-schema
github.com/kriszyp/json-schema/commit/22f146111f541d9737e832823699ad3528ca7741
github.com/kriszyp/json-schema/commit/b62f1da1ff5442f23443d6be6a92d00e65cba93a
github.com/kriszyp/json-schema/commit/f6f6a3b02d667aa4ba2d5d50cc19208c4462abfa
huntr.dev/bounties/bb6ccd63-f505-4e3a-b55f-cd2662c261a9
lists.debian.org/debian-lts-announce/2022/12/msg00013.html
nvd.nist.gov/vuln/detail/CVE-2021-3918
Related
cvelist
cvelist
CVE-2021-3918 Prototype Pollution in kriszyp/json-schema
2021-11-13 00:00:00
cve
cve
CVE-2021-3918
2021-11-13 09:15:06
nessus
nessus
Debian DLA-3228-1 : node-json-schema - LTS security update
2022-12-07 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : JSON Schema vulnerability (USN-6103-1)
2023-05-24 00:00:00
SUSE SLES15 Security Update : nodejs12 (SUSE-SU-2022:0657-1)
2022-03-03 00:00:00
ubuntucve
ubuntucve
CVE-2021-3918
2021-11-13 00:00:00
debian
debian
[SECURITY] [DLA 3228-1] node-json-schema security update
2022-12-06 19:15:29
ibm
ibm
redhatcve
redhatcve
CVE-2021-3918
2021-11-18 18:01:43
huntr
huntr
Prototype Pollution in kriszyp/json-schema
2021-10-03 13:08:43
osv
osv
node-json-schema vulnerability
2023-05-24 11:08:39
CVE-2021-3918
2021-11-13 09:15:06
node-json-schema - security update
2022-12-07 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3228-1)
2022-12-07 00:00:00
Mageia: Security Advisory (MGASA-2022-0463)
2022-12-14 00:00:00
Ubuntu: Security Advisory (USN-6103-1)
2023-05-25 00:00:00
github
github
json-schema is vulnerable to Prototype Pollution
2021-11-19 20:16:17
cnvd
cnvd
json-schema has an unspecified vulnerability
2021-11-16 00:00:00
debiancve
debiancve
CVE-2021-3918
2021-11-13 09:15:06
prion
prion
Code injection
2021-11-13 09:15:00
ubuntu
ubuntu
JSON Schema vulnerability
2023-05-24 00:00:00
veracode
veracode
Prototype Pollution
2021-11-15 04:42:48
mageia
mageia
Updated nodejs-json-schema packages fix security vulnerability
2022-12-14 01:09:19
nvd
nvd
CVE-2021-3918
2021-11-13 09:15:06
suse
suse
Security update for nodejs12 (important)
2022-03-02 00:00:00
Security update for nodejs8 (important)
2022-03-04 00:00:00
Security update for nodejs14 (important)
2022-03-04 00:00:00
redhat
redhat
rocky
rocky
nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
12 bug fix and enhancement update
2022-06-21 11:47:44
nodejs:14 security, bug fix, and enhancement update
2022-02-01 20:08:39
oraclelinux
oraclelinux
nodejs:16 security, bug fix, and enhancement update
2021-12-16 00:00:00
nodejs:14 security, bug fix, and enhancement update
2022-02-02 00:00:00
almalinux
almalinux
Moderate: nodejs:16 security, bug fix, and enhancement update
2021-12-15 19:09:29
Moderate: nodejs:14 security, bug fix, and enhancement update
2022-02-01 20:08:39
redos
redos
ROS-20240403-01
2024-04-03 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00