~ / search / GHSA-rh46-3fgc-mvrf

GHSA-rh46-3fgc-mvrf

Validation bypass is possible in Json Pattern Validator

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-19507

Packages

EcosystemPackageAffectedFixed in
npm jpv < 2.1.1 2.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': {'name':'Array'}. This affects validate(). Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.

References

External links from the advisory. They lead to third-party sites.