Skip to content
OpenAdvisories

Package · npm

schema-inspector

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2021-21267

    Regular Expression Denial-of-Service in npm schema-inspector

    Schema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector). In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input (for example `a@0.0.0.0.0.0.0.0.0.0.0.0.…

    schema-inspector schema-inspector schema-inspector npm
  • Critical 9.8
    CVE-2019-10781

    Validation Bypass in schema-inspector

    In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.

    snyk schema-inspector schema-inspector npm