Lucene search
K

17 matches found

Veracode
Veracode
added 2025/11/13 7:21 a.m.3 views

Prototype Pollution

json-schema-editor-visual is vulnerable to Prototype Pollution. The vulnerability is due to insufficient validation of user-supplied input in the setData and deleteData functions, which allows an attacker to supply a crafted payload to inject or delete properties on Object.prototype, potentially...

6.5CVSS6.8AI score0.00133EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-31053

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00133EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/09/26 8:51 p.m.7 views

CVE-2025-57320

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

6.5CVSS6.7AI score0.00133EPSS
Exploits0References1
Snyk
Snyk
added 2025/09/24 9:30 p.m.2 views

Prototype Pollution

Overview json-schema-editor-visual is a jsonschema editor Affected versions of this package are vulnerable to Prototype Pollution via the setData or deleteData functions. An attacker can manipulate the prototype of objects by supplying a crafted payload, potentially leading to unauthorized...

6.9CVSS8AI score0.00133EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/09/24 9:30 p.m.3 views

json-schema-editor-visual vulnerable to prototype pollution

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

6.5CVSS6.7AI score0.00133EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/09/24 9:30 p.m.1 views

GHSA-3C3P-XH4F-PFH7 json-schema-editor-visual vulnerable to prototype pollution

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

6.5CVSS6.7AI score0.00133EPSS
Exploits0References4
vulnersOsv
vulnersOsv
added 2025/09/24 9:30 p.m.4 views

graphos-cli (>=1.0.0 <=1.0.1), panshi-client (>=0.0.7 <=0.0.8) potentially affected by CVE-2025-57320 via json-schema-editor-visual (>=1.1.1 <=2.0.0)

json-schema-editor-visual NPM version =1.1.1, =1.0.0, =0.0.7, =0.0.8 Source cves: CVE-2025-57320 Source advisory: OSV:GHSA-3C3P-XH4F-PFH7...

6.5CVSS5.8AI score0.00133EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2025/09/24 9:30 p.m.3 views

graphos-cli (>=1.0.0 <=1.0.1), panshi-client (>=0.0.7 <=0.0.8) potentially affected by CVE-2025-57320 via json-schema-editor-visual (>=1.1.1 <=2.0.0)

json-schema-editor-visual NPM version =1.1.1, =1.0.0, =0.0.7, =0.0.8 Source cves: CVE-2025-57320 Source advisory: SNYK:JS-JSONSCHEMAEDITORVISUAL-13110010...

6.5CVSS5.8AI score0.00133EPSS
Exploits0
OSV
OSV
added 2025/09/24 9:15 p.m.0 views

CVE-2025-57320

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

6.5CVSS5.8AI score0.00133EPSS
Exploits0References2
NVD
NVD
added 2025/09/24 9:15 p.m.1 views

CVE-2025-57320

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

6.5CVSS0.00133EPSS
Exploits0References2
CVE
CVE
added 2025/09/24 12:0 a.m.10 views

CVE-2025-57320

CVE-2025-57320 affects the package json-schema-editor-visual. Connected sources confirm a Prototype Pollution vulnerability in the setData and deleteData functions for versions up to and including 1.1.1, allowing a crafted payload to inject or delete properties on Object.prototype. Practical impa...

6.5CVSS6.3AI score0.00133EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/24 12:0 a.m.2 views

PT-2025-39350

Name of the Vulnerable Software and Affected Versions json-schema-editor-visual versions through 1.1.1 Description A Prototype Pollution issue exists in the setData and deleteData functions. Attackers can inject or delete properties on Object.prototype by providing a crafted payload, potentially...

6.5CVSS6.5AI score0.00133EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/09/24 12:0 a.m.1 views

json-schema-editor-vue 安全漏洞

json-schema-editor-vue is a json editor by AlbertZhang personal developer. A security vulnerability exists in json-schema-editor-vue 1.1.1 and earlier versions, which stems from prototype contamination in the setData and deleteData functions, which could lead to a denial of service attack...

6.5CVSS6.2AI score0.00133EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/24 12:0 a.m.4 views

CVE-2025-57320

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

0.00133EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/24 12:0 a.m.1 views

CVE-2025-57320

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

6.3AI score0.00133EPSS
Exploits0References2
OSV
OSV
added 2024/11/27 12:56 a.m.6 views

MAL-2024-11047 Malicious code in json-schema-editor-visual-yapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2c434b89e0272562d45ccf56680fe4b6edf72651ddb2603233fa84ad67bf2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/27 12:56 a.m.2 views

Malicious code in json-schema-editor-visual-yapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2c434b89e0272562d45ccf56680fe4b6edf72651ddb2603233fa84ad67bf2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References3
Rows per page
Query Builder