json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejsUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-nodemon | May 4, 2022 | Nov 13, 2021 |
| Centos_linux | — | Upgrade npmUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-debugsourceUpgrade nodejs-debuginfo | Dec 17, 2021 | Nov 13, 2021 |
| Debian | — | Upgrade node-json-schema | Dec 9, 2022 | Nov 13, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade npmUpgrade nodejs-nodemonUpgrade nodejs-devel | Dec 17, 2021 | Oct 3, 2021 |
| Redhat_linux | — | Upgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-debuginfo | Dec 17, 2021 | Nov 13, 2021 |
| Rocky_linux | — | Upgrade npmUpgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejs | Mar 5, 2024 | Nov 13, 2021 |
| Suse | — | Upgrade libisccc1600-32bitUpgrade nodejs12-develUpgrade libbind9-1600-32bitUpgrade nodejs12-docsUpgrade libisc1606Upgrade nodejs10-docsUpgrade nodejs8-develUpgrade npm10Upgrade nodejs12Upgrade npm14Upgrade libirs-develUpgrade grafanaUpgrade nodejs14-develUpgrade nodejs-commonUpgrade nodejs10-develUpgrade libns1604-32bitUpgrade nodejs8Upgrade bindUpgrade libdns1605-32bitUpgrade nodejs8-docsUpgrade bind-devel-32bitUpgrade bind-docUpgrade libisccfg1600-32bitUpgrade dracut-saltbootUpgrade nodejs14-docsUpgrade wireUpgrade nodejs10Upgrade libisccc1600Upgrade libirs1601Upgrade npm12Upgrade spacecmdUpgrade python3-bindUpgrade bind-utilsUpgrade libirs1601-32bitUpgrade libbind9-1600Upgrade libisccfg1600Upgrade npm8Upgrade libns1604Upgrade libdns1605Upgrade nodejs14Upgrade libisc1606-32bitUpgrade bind-develUpgrade bind-chrootenv | Feb 22, 2022 | Nov 13, 2021 |
| Ubuntu | — | Upgrade node-json-schema | May 25, 2023 | Nov 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub