CVE-2025-57320

The json-schema-editor-visual package (versions thru 1.1.1 ) is vulnerable to a Prototype Pollution vulnerability in the setData and deleteData functions. Due to insufficient validation of user-supplied input, an attacker can supply a crafted payload to inject or delete properties on Object.proto...

CVE-2025-57320: Improperly Controlled Modification of Object Prototype Attributes

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

Malicious code in json-schema-editor-visual-yapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2c434b89e0272562d45ccf56680fe4b6edf72651ddb2603233fa84ad67bf2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11047 Malicious code in json-schema-editor-visual-yapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2c434b89e0272562d45ccf56680fe4b6edf72651ddb2603233fa84ad67bf2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in json-schema-editor-visual-yapi

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PYSEC-2020-248

Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata therefore, only available to the Manager role...

PT-2020-17039

Name of the Vulnerable Software and Affected Versions Plone versions prior to 5.2.3 Description The issue allows XXE attacks via a feature protected by an unapplied permission of plone.schemaeditor.ManageSchemata, which is only available to the Manager role. Recommendations For versions prior to...