json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-packagingUpgrade npmUpgrade nodejs | May 4, 2022 | Nov 13, 2021 |
| Centos_linux | — | Upgrade nodejsUpgrade npmUpgrade nodejs-develUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-docs | Dec 17, 2021 | Nov 13, 2021 |
| Debian | — | Upgrade node-json-schema | Dec 9, 2022 | Nov 13, 2021 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Oracle_linux | — | Upgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-develUpgrade npmUpgrade nodejs-nodemon | Dec 17, 2021 | Oct 3, 2021 |
| Redhat_linux | — | Upgrade npmUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-docs | Dec 17, 2021 | Nov 13, 2021 |
| Rocky_linux | — | Upgrade nodejs-develUpgrade nodejsUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-debugsource | Mar 5, 2024 | Nov 13, 2021 |
| Suse | — | Upgrade bind-develUpgrade dracut-saltbootUpgrade libdns1605Upgrade libns1604Upgrade spacecmdUpgrade libisccc1600Upgrade npm8Upgrade npm12Upgrade libirs1601-32bitUpgrade python3-bindUpgrade libbind9-1600Upgrade nodejs14-docsUpgrade libirs1601Upgrade bind-utilsUpgrade libisc1606-32bitUpgrade libisccfg1600Upgrade wireUpgrade nodejs14Upgrade nodejs10Upgrade bind-chrootenvUpgrade nodejs8Upgrade nodejs12Upgrade npm10Upgrade libisccfg1600-32bitUpgrade libisccc1600-32bitUpgrade libisc1606Upgrade libdns1605-32bitUpgrade nodejs12-docsUpgrade bind-docUpgrade nodejs-commonUpgrade grafanaUpgrade nodejs14-develUpgrade nodejs12-develUpgrade libbind9-1600-32bitUpgrade libns1604-32bitUpgrade npm14Upgrade nodejs8-docsUpgrade bindUpgrade nodejs8-develUpgrade libirs-develUpgrade nodejs10-docsUpgrade bind-devel-32bitUpgrade nodejs10-devel | Feb 22, 2022 | Nov 13, 2021 |
| Ubuntu | — | Upgrade node-json-schema | May 25, 2023 | Nov 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub