View all vulnerabilities

CVE-2021-3918

json-schema is vulnerable to Prototype Pollution

Description

json-schema before version 0.4.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').
Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
9.8
Score Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Versions
json-schema < 0.4.0
Severity
Critical
Critical
Critical
Ecosystem
JavaScript
Publish Date
November 19, 2021
Modified Date
January 17, 2025