Skip to content
OpenAdvisories

Package · npm

jpv

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2020-17479

    Validation bypass in jpv

    jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array.

    jpv npm
  • Medium 5.3
    CVE-2019-19507

    Validation bypass is possible in Json Pattern Validator

    In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': {'name':'Array'}. This affects validate(). Hence, a crafted payl…

    jpv npm