Description
In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Snyk | schema-inspector | All versions prior to version 1.6.9 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | schema-inspector | < 1.6.9 | 1.6.9 | GHSA-r24h-634p-m72x |