json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-packagingUpgrade npmUpgrade nodejs | May 4, 2022 | Nov 13, 2021 |
| Centos_linux | — | Upgrade nodejsUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-packaging | Dec 17, 2021 | Nov 13, 2021 |
| Debian | — | Upgrade node-json-schema | Dec 9, 2022 | Nov 13, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade nodejs-nodemonUpgrade npmUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-docs | Dec 17, 2021 | Oct 3, 2021 |
| Redhat_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-debugsource | Dec 17, 2021 | Nov 13, 2021 |
| Rocky_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-devel | Mar 5, 2024 | Nov 13, 2021 |
| Suse | — | Upgrade grafanaUpgrade nodejs12Upgrade libisc1606Upgrade nodejs8-docsUpgrade nodejs14-develUpgrade libbind9-1600-32bitUpgrade nodejs12-develUpgrade nodejs-commonUpgrade bind-devel-32bitUpgrade libirs-develUpgrade nodejs10-docsUpgrade nodejs12-docsUpgrade bindUpgrade bind-docUpgrade nodejs10-develUpgrade nodejs8-develUpgrade nodejs8Upgrade libdns1605-32bitUpgrade libns1604-32bitUpgrade npm10Upgrade npm14Upgrade libisccc1600-32bitUpgrade libisccfg1600-32bitUpgrade libdns1605Upgrade npm12Upgrade libbind9-1600Upgrade libisccc1600Upgrade spacecmdUpgrade python3-bindUpgrade wireUpgrade nodejs14-docsUpgrade libirs1601Upgrade dracut-saltbootUpgrade libns1604Upgrade bind-develUpgrade npm8Upgrade nodejs10Upgrade libisccfg1600Upgrade nodejs14Upgrade libirs1601-32bitUpgrade bind-chrootenvUpgrade libisc1606-32bitUpgrade bind-utils | Feb 22, 2022 | Nov 13, 2021 |
| Ubuntu | — | Upgrade node-json-schema | May 25, 2023 | Nov 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub