Lucene search

Prototype Pollution in Ajv

🗓️ 10 Feb 2022 23:59:30Reported by GoogleType

osv🔗 osv.dev👁 15 Views

Issue in Ajv validate() allows prototype pollutio

Reporter	Title	Published	Views	Family All 35
IBM Security Bulletins	Security Bulletin: Watson AI Gateway for Cloud Pak for Data is vulnerable to an Ajv (aka Another JSON Schema Validator) could allow a remote attacker to execute arbitrary code on the system (CVE-2020-15366)	30 Jun 202318:37	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2020-15366 An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2.	4 Jun 202121:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	11 Apr 202219:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	20 Jun 202416:51	–	ibm
IBM Security Bulletins	Security Bulletin: Watson Machine Learning Accelerator on Cloud Pak for Data Version is affected by multiple vulnerabilties	12 Dec 202317:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System	17 Aug 202209:46	–	ibm
IBM Security Bulletins	Security Bulletin: Critical Vulnerabilities in libraries used by libraries that IBM Spectrum discover is using (libraries of libraries)	28 Mar 202216:33	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains security vulnerabilities	13 May 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Sep 202316:08	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-15366
github	www.github.com/ajv-validator/ajv/commit/65b2f7d76b190ac63a0d4e9154c712d7aa37049f
github	www.github.com/ajv-validator/ajv
github	www.github.com/ajv-validator/ajv/releases/tag/v6.12.3
github	www.github.com/ajv-validator/ajv/tags
hackerone	www.hackerone.com/bugs

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Feb 2022 23:30Current

6.5Medium risk

Vulners AI Score6.5

EPSS0.004