[NPM:GHSA-896R-F27R-55MW] json-schema is vulnerable to Prototype Pollution

Severity Critical

Affected Packages 1

Fixed Packages 1

CVEs 1

json-schema before version 0.4.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').

Package	Affected Version
pkg:npm/json-schema	< 0.4.0

Package	Fixed Version
pkg:npm/json-schema	= 0.4.0

ID

NPM:GHSA-896R-F27R-55MW

Severity

critical

URL

https://github.com/advisories/GHSA-896r-f27r-55mw

Published

2021-11-19T20:16:17
(2 years ago)

Modified

2023-11-29T20:46:37
(9 months ago)

Rights

NPM Security Team

Other Advisories

Source	# ID	Name	URL
			https://nvd.nist.gov/vuln/detail/CVE-2021-3918
			https://github.com/kriszyp/json-schema/commit/22f146111f541d9737e832823699ad3528ca7741
			https://huntr.dev/bounties/bb6ccd63-f505-4e3a-b55f-cd2662c261a9
			https://github.com/kriszyp/json-schema/commit/b62f1da1ff5442f23443d6be6a92d00e65cba93a
			https://github.com/kriszyp/json-schema/commit/f6f6a3b02d667aa4ba2d5d50cc19208c4462abfa
			https://lists.debian.org/debian-lts-announce/2022/12/msg00013.html
			https://github.com/advisories/GHSA-896r-f27r-55mw

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:npm/json-schema		json-schema	< 0.4.0
Fixed	pkg:npm/json-schema		json-schema	= 0.4.0

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date