Lucene search
K

9 matches found

Veracode
Veracode
added 2025/11/13 7:21 a.m.4 views

Prototype Pollution

json-schema-editor-visual is vulnerable to Prototype Pollution. The vulnerability is due to insufficient validation of user-supplied input in the setData and deleteData functions, which allows an attacker to supply a crafted payload to inject or delete properties on Object.prototype, potentially...

6.5CVSS6.8AI score0.00142EPSS
Exploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/09/26 8:51 p.m.7 views

CVE-2025-57320

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

6.5CVSS6.7AI score0.00142EPSS
Exploits0References1
Snyk
Snyk
added 2025/09/24 9:30 p.m.2 views

Prototype Pollution

Overview json-schema-editor-visual is a jsonschema editor Affected versions of this package are vulnerable to Prototype Pollution via the setData or deleteData functions. An attacker can manipulate the prototype of objects by supplying a crafted payload, potentially leading to unauthorized...

6.9CVSS8AI score0.00142EPSS
Exploits0References2
OSV
OSV
added 2025/09/24 9:30 p.m.1 views

GHSA-3C3P-XH4F-PFH7 json-schema-editor-visual vulnerable to prototype pollution

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

6.5CVSS6.7AI score0.00142EPSS
Exploits0References4
vulnersOsv
vulnersOsv
added 2025/09/24 9:30 p.m.5 views

graphos-cli (>=1.0.0 <=1.0.1), panshi-client (>=0.0.7 <=0.0.8) potentially affected by CVE-2025-57320 via json-schema-editor-visual (>=1.1.1 <=2.0.0)

json-schema-editor-visual NPM version =1.1.1, =1.0.0, =0.0.7, =0.0.8 Source cves: CVE-2025-57320 Source advisory: OSV:GHSA-3C3P-XH4F-PFH7...

6.5CVSS5.8AI score0.00142EPSS
Exploits0
OSV
OSV
added 2025/09/24 9:15 p.m.1 views

CVE-2025-57320

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

6.5CVSS5.8AI score0.00142EPSS
Exploits0References2
CVE
CVE
added 2025/09/24 12:0 a.m.11 views

CVE-2025-57320

CVE-2025-57320 affects the package json-schema-editor-visual. Connected sources confirm a Prototype Pollution vulnerability in the setData and deleteData functions for versions up to and including 1.1.1, allowing a crafted payload to inject or delete properties on Object.prototype. Practical impa...

6.5CVSS6.3AI score0.00142EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/09/24 12:0 a.m.5 views

CVE-2025-57320

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...

0.00142EPSS
Exploits0References2
OSV
OSV
added 2024/11/27 12:56 a.m.7 views

MAL-2024-11047 Malicious code in json-schema-editor-visual-yapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2c434b89e0272562d45ccf56680fe4b6edf72651ddb2603233fa84ad67bf2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
Rows per page
Query Builder