~ / search / GHSA-5f97-h2c2-826q

GHSA-5f97-h2c2-826q

json-schema-ref-parser Prototype Pollution issue

Source: GitHub Advisory Database (reviewed) High CVE-2024-29651

Packages

EcosystemPackageAffectedFixed in
npm @apidevtools/json-schema-ref-parser >= 11.0.0, < 11.2.0 11.2.0

Details

As written in the advisory (Markdown source, shown as plain text).

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the `bundle()`, `parse()`, `resolve()`, `dereference()` functions.

References

External links from the advisory. They lead to third-party sites.