Json Pattern Validator Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Json Pattern Validator Project records in CISA KEV

No Json Pattern Validator Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Json Pattern Validator 2 records MEDIUM

Records

2 records in Json Pattern Validator · all components

TI-2020-13237 CVE-2020-17479 · GHSA-vh6r-g38f-q3w8

jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array.

MEDIUM 47

jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02462 Published 2020-08-10 Fixed in 2.2.2 CWE-20

TI-2019-14053 CVE-2019-19507 · GHSA-rh46-3fgc-mvrf

In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because…

LOW 26

In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': {'name':'Array'}.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00974 Published 2019-12-02 Fixed in 2.1.1 CWE-287

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0