GHSA-r24h-634p-m72x
Validation Bypass in schema-inspector
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | schema-inspector | < 1.6.9 | 1.6.9 |
Details
As written in the advisory (Markdown source, shown as plain text).
In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.
References
External links from the advisory. They lead to third-party sites.