json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejs-packagingUpgrade npmUpgrade nodejs | May 4, 2022 | Nov 13, 2021 |
| Centos_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-packagingUpgrade nodejs-debuginfoUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejsUpgrade nodejs-develUpgrade npmUpgrade nodejs-full-i18n | Dec 17, 2021 | Nov 13, 2021 |
| Debian | — | Upgrade node-json-schema | Dec 9, 2022 | Nov 13, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade npmUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-full-i18n | Dec 17, 2021 | Oct 3, 2021 |
| Redhat_linux | — | Upgrade nodejsUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-devel | Dec 17, 2021 | Nov 13, 2021 |
| Rocky_linux | — | Upgrade npmUpgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-debuginfo | Mar 5, 2024 | Nov 13, 2021 |
| Suse | — | Upgrade libbind9-1600-32bitUpgrade libisccc1600-32bitUpgrade nodejs10-docsUpgrade bind-devel-32bitUpgrade bindUpgrade grafanaUpgrade nodejs8-develUpgrade nodejs14-develUpgrade libdns1605-32bitUpgrade libns1604-32bitUpgrade nodejs8Upgrade nodejs8-docsUpgrade nodejs12-docsUpgrade libisccfg1600-32bitUpgrade libisc1606Upgrade libirs-develUpgrade nodejs10-develUpgrade nodejs-commonUpgrade npm10Upgrade npm14Upgrade nodejs12Upgrade nodejs12-develUpgrade bind-docUpgrade wireUpgrade nodejs14-docsUpgrade bind-chrootenvUpgrade libisc1606-32bitUpgrade libirs1601Upgrade npm12Upgrade libisccc1600Upgrade nodejs10Upgrade spacecmdUpgrade python3-bindUpgrade npm8Upgrade libirs1601-32bitUpgrade libdns1605Upgrade dracut-saltbootUpgrade bind-utilsUpgrade libns1604Upgrade nodejs14Upgrade libisccfg1600Upgrade bind-develUpgrade libbind9-1600 | Feb 22, 2022 | Nov 13, 2021 |
| Ubuntu | — | Upgrade node-json-schema | May 25, 2023 | Nov 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub