json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-packagingUpgrade npm | May 4, 2022 | Nov 13, 2021 |
| Centos_linux | — | Upgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-full-i18nUpgrade npm | Dec 17, 2021 | Nov 13, 2021 |
| Debian | — | Upgrade node-json-schema | Dec 9, 2022 | Nov 13, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade npmUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-docs | Dec 17, 2021 | Oct 3, 2021 |
| Redhat_linux | — | Upgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-debuginfo | Dec 17, 2021 | Nov 13, 2021 |
| Rocky_linux | — | Upgrade nodejs-develUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceUpgrade npmUpgrade nodejs-full-i18n | Mar 5, 2024 | Nov 13, 2021 |
| Suse | — | Upgrade grafanaUpgrade libdns1605-32bitUpgrade nodejs-commonUpgrade libisccc1600-32bitUpgrade nodejs14-develUpgrade nodejs10-develUpgrade libisccfg1600-32bitUpgrade nodejs10-docsUpgrade bind-devel-32bitUpgrade bindUpgrade nodejs8-docsUpgrade nodejs12Upgrade nodejs8Upgrade libbind9-1600-32bitUpgrade libns1604-32bitUpgrade nodejs12-develUpgrade nodejs12-docsUpgrade npm14Upgrade nodejs8-develUpgrade bind-docUpgrade libirs-develUpgrade libisc1606Upgrade npm10Upgrade libbind9-1600Upgrade bind-utilsUpgrade python3-bindUpgrade bind-chrootenvUpgrade npm8Upgrade nodejs14Upgrade libisccc1600Upgrade libisc1606-32bitUpgrade spacecmdUpgrade npm12Upgrade nodejs14-docsUpgrade wireUpgrade libirs1601Upgrade bind-develUpgrade nodejs10Upgrade libdns1605Upgrade dracut-saltbootUpgrade libns1604Upgrade libirs1601-32bitUpgrade libisccfg1600 | Feb 22, 2022 | Nov 13, 2021 |
| Ubuntu | — | Upgrade node-json-schema | May 25, 2023 | Nov 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub