GHSA-5f97-h2c2-826qHighCVSS 8.1

json-schema-ref-parser Prototype Pollution issue

Published
May 20, 2024
Last Modified
May 20, 2024

🔗 CVE IDs covered (1)

CVE-2024-29651 →

📋 Description

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle(), parse(), resolve(), dereference() functions.

🎯 Affected products1

  • npm/@apidevtools/json-schema-ref-parser:>= 11.0.0, <= 11.1.0

🔗 References (4)