json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade npmUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-full-i18n | May 4, 2022 | Nov 13, 2021 |
| Centos_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejs-packagingUpgrade nodejsUpgrade npmUpgrade nodejs-develUpgrade nodejs-full-i18n | Dec 17, 2021 | Nov 13, 2021 |
| Debian | — | Upgrade node-json-schema | Dec 9, 2022 | Nov 13, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade npm | Dec 17, 2021 | Oct 3, 2021 |
| Redhat_linux | — | Upgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs | Dec 17, 2021 | Nov 13, 2021 |
| Rocky_linux | — | Upgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejsUpgrade npmUpgrade nodejs-debugsourceUpgrade nodejs-full-i18n | Mar 5, 2024 | Nov 13, 2021 |
| Suse | — | Upgrade libisc1606-32bitUpgrade bind-chrootenvUpgrade nodejs14-docsUpgrade wireUpgrade libdns1605Upgrade libisccfg1600Upgrade nodejs14Upgrade libirs1601-32bitUpgrade libbind9-1600Upgrade npm8Upgrade bind-develUpgrade bind-utilsUpgrade npm12Upgrade libns1604Upgrade python3-bindUpgrade dracut-saltbootUpgrade libirs1601Upgrade nodejs10Upgrade spacecmdUpgrade libisccc1600Upgrade npm14Upgrade nodejs8Upgrade nodejs10-docsUpgrade nodejs12-develUpgrade nodejs8-develUpgrade libirs-develUpgrade nodejs10-develUpgrade nodejs12-docsUpgrade libisccc1600-32bitUpgrade nodejs-commonUpgrade bind-devel-32bitUpgrade libisccfg1600-32bitUpgrade nodejs14-develUpgrade bindUpgrade libbind9-1600-32bitUpgrade nodejs8-docsUpgrade npm10Upgrade libdns1605-32bitUpgrade grafanaUpgrade libisc1606Upgrade nodejs12Upgrade bind-docUpgrade libns1604-32bit | Feb 22, 2022 | Nov 13, 2021 |
| Ubuntu | — | Upgrade node-json-schema | May 25, 2023 | Nov 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub