TI-2021-02827 CVE-2021-3918 · GHSA-896r-f27r-55mw
Prototype Pollution in kriszyp/json-schema
Priority MEDIUM 49
json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
kriszyp
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
kriszyp records in CISA KEVNo kriszyp vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2023-28522 CVE-2023-52079 · GHSA-7hpj-7hhx-2fgx
Conversion of property names to strings can trigger infinite recursion
Priority LOW 31
msgpackr is a fast MessagePack NodeJS/JavaScript implementation.