Description
jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | jpv | < 2.2.2 | 2.2.2 | GHSA-vh6r-g38f-q3w8 |
Critical · 9.8
CVE-2020-17479
EUVD-2021-1204GHSA-vh6r-g38f-q3w8
Validation bypass in jpv
Published Aug 10, 2020 · Updated Aug 4, 2024 · Assigned by mitre