json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejsUpgrade npm | May 4, 2022 | Nov 13, 2021 |
| Centos_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejs | Dec 17, 2021 | Nov 13, 2021 |
| Debian | — | Upgrade node-json-schema | Dec 9, 2022 | Nov 13, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade nodejs-develUpgrade npmUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade nodejs | Dec 17, 2021 | Oct 3, 2021 |
| Redhat_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-devel | Dec 17, 2021 | Nov 13, 2021 |
| Rocky_linux | — | Upgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-devel | Mar 5, 2024 | Nov 13, 2021 |
| Suse | — | Upgrade libisc1606-32bitUpgrade libns1604Upgrade npm8Upgrade libbind9-1600Upgrade bind-chrootenvUpgrade libisccfg1600Upgrade bind-develUpgrade nodejs14Upgrade libirs1601-32bitUpgrade libisccc1600Upgrade bind-utilsUpgrade libdns1605Upgrade dracut-saltbootUpgrade libirs1601Upgrade nodejs10Upgrade nodejs14-docsUpgrade wireUpgrade npm12Upgrade python3-bindUpgrade spacecmdUpgrade libdns1605-32bitUpgrade nodejs8-develUpgrade nodejs8Upgrade npm14Upgrade npm10Upgrade nodejs12-develUpgrade bind-devel-32bitUpgrade libisccc1600-32bitUpgrade nodejs-commonUpgrade nodejs14-develUpgrade nodejs10-docsUpgrade nodejs10-develUpgrade grafanaUpgrade libns1604-32bitUpgrade bindUpgrade libirs-develUpgrade libisccfg1600-32bitUpgrade libbind9-1600-32bitUpgrade nodejs8-docsUpgrade bind-docUpgrade libisc1606Upgrade nodejs12Upgrade nodejs12-docs | Feb 22, 2022 | Nov 13, 2021 |
| Ubuntu | — | Upgrade node-json-schema | May 25, 2023 | Nov 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub