Schema-inspector Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Schema-inspector Project records in CISA KEV

No Schema-inspector Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Schema-inspector 2 records MEDIUM

Records

2 records

TI-2019-08046 CVE-2019-10781 · GHSA-r24h-634p-m72x

Exposure of resource to wrong sphere in Snyk schema-inspector

MEDIUM 45

In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01392 Published 2020-01-22 Fixed in 1.6.9 CWE-668

TI-2021-04368 CVE-2021-21267 · GHSA-f38p-c2gq-4pmr

Regular Expression Denial-of-Service in npm schema-inspector

LOW 37

Schema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0209 Published 2021-03-19 Fixed in 2.0.0 CWE-20

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0