USN-6103-1 — node-json-schema vulnerability

Summary

It was discovered that JSON Schema incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to exploit
JavaScript runtimes and cause a denial of service or execute arbitrary code.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	node-json-schema	0.2.3-1+deb10u1build0.18.04.1
Ubuntu · 20.04 LTS 20.04:LTS	node-json-schema	0.2.3-1+deb10u1build0.20.04.1

Vulnerabilities 1

Critical 9.8

CVE-2021-3918

Prototype Pollution in kriszyp/json-schema

json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

kriszyp kriszyp/json-schema node-json-schema json-schema Debian Ubuntu npm

Nov 13, 2021

References

report
https://ubuntu.com/security/CVE-2021-3918

node-json-schema vulnerability

Summary

Fixed packages 2

Vulnerabilities 1

Prototype Pollution in kriszyp/json-schema

References