~ / search / GHSA-vh6r-g38f-q3w8

GHSA-vh6r-g38f-q3w8

Validation bypass in jpv

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-17479

Packages

EcosystemPackageAffectedFixed in
npm jpv < 2.2.2 2.2.2

Details

As written in the advisory (Markdown source, shown as plain text).

jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array.

References

External links from the advisory. They lead to third-party sites.