Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-57320 EUVD-2025-31053GHSA-3c3p-xh4f-pfh7

json-schema-editor-visual vulnerable to prototype pollution

Published Sep 24, 2025 · Updated Sep 25, 2025 · Assigned by mitre

Description

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.

Affected packages

EcosystemPackageAffectedFixedRecord
npm json-schema-editor-visual <= 2.0.0 — GHSA-3c3p-xh4f-pfh7

References