Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
ajv.js records in CISA KEVNo ajv.js vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 72
ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00539 · Published 2026-02-11 · Partial fix · 6.14.0, 8.17.2 +1 CWE-1333
Priority LOW 30
An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2.
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.02313 · Published 2020-07-15 · Partial fix · 6.12.3 CWE-1321
