Validation Bypass in schema-inspector

CRITICO 9.8CVE-2019-10781 · GHSA-r24h-634p-m72x · SNYK-JS-SCHEMAINSPECTOR-536970 · Published 22/01/2020 · updated 17/06/2026

In breve

CVE-2019-10781 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda schema-inspector (schema-inspector project), schema-inspector.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 72.5% delle vulnerabilità.
Correzione: aggiornare a 1.6.9 o successiva.

Package	Affected versions	Patched versions
schema-inspector schema-inspector_project	`< 1.6.9`	`1.6.9`
schema-inspector npm	`< 1.6.9`	`1.6.9`

Description

In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the sanitize() and the validate() function used within schema-inspector.

NVD description

In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.

References

nvd.nist.gov/vuln/detail/CVE-2019-10781 · ADVISORY
Atinux/schema-inspector commit 345a7b2 · WEB
Atinux/schema-inspector · PACKAGE
snyk.io/vuln/SNYK-JS-SCHEMAINSPECTOR-536970 · WEB

Altre vulnerabilità di schema-inspector

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free