Lucene search
+L

277 matches found

NVD
NVD
added 3 days ago8 views

CVE-2026-16008

A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. The attack can...

6.5CVSS0.00262EPSS
Exploits0References8
Cvelist
Cvelist
added 3 days ago35 views

CVE-2026-16008 sagold json-schema-library propertyDependencies.ts parsePropertyDependencies prototype pollution

A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. The attack can...

6.5CVSS0.00262EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 3 days ago7 views

CVE-2026-16008

A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. The attack can...

6.5CVSS5AI score0.00262EPSS
Exploits0References9Affected Software1
OSV
OSV
added 3 days ago4 views

CVE-2026-16008 sagold json-schema-library propertyDependencies.ts parsePropertyDependencies prototype pollution

A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. The attack can...

5.3CVSS6AI score0.00262EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 3 days ago7 views

PT-2026-60739

A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. The attack can...

6.5CVSS5AI score0.00262EPSS
Exploits0References9
NVD
NVD
added 2026/07/09 6:16 p.m.11 views

CVE-2026-15195

A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched...

6.5CVSS0.00262EPSS
Exploits0References8
EUVD
EUVD
added 2026/07/09 5:15 p.m.7 views

EUVD-2026-42651

A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched...

6.5CVSS6.3AI score0.00262EPSS
Exploits0References8
CVE
CVE
added 2026/07/09 5:15 p.m.12 views

CVE-2026-15195

The CVE affects the apidevtools json-schema-ref-parser package up to version 15.3.5. The vulnerability targets the Refs.set/Pointer.set paths in lib/pointer.ts, enabling remote modification of object prototype attributes (prototype pollution) as described. Impact is described as remote exploitati...

6.5CVSS6.3AI score0.00262EPSS
Exploits0References8
OSV
OSV
added 2026/07/09 5:15 p.m.4 views

CVE-2026-15195 apidevtools json-schema-ref-parser pointer.ts Pointer.set prototype pollution

A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched...

5.3CVSS5.9AI score0.00262EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2026/06/30 12:13 a.m.7 views

ajv: ReDoS via $data reference

A flaw was found in ajv. When the $data option is enabled, the value of the pattern keyword is passed directly to the JavaScript RegExp constructor without sufficient validation. An attacker able to supply a malicious regular expression pattern can trigger a ReDoS Regular Expression Denial of...

7.5CVSS6.4AI score0.00492EPSS
Exploits1References5
OSV
OSV
added 2026/06/13 11:43 a.m.11 views

ROOT-APP-NPM-CVE-2021-3918 CVE-2021-3918 in @rootio/json-schema - Patched by Root

Root has patched CVE-2021-3918 in the @rootio/json-schema package for Root:npm. Multiple fixed versions available...

9.8CVSS8.3AI score0.03563EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2026/06/03 12:0 a.m.13 views

RockyLinux 10 : galera and mariadb11.8 (RLSA-2026:19021)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:19021 advisory. MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSONSCHEMAVALID function vulnerability CVE-2026-32710 Tenable has extracted the preceding...

9.9CVSS5.9AI score0.00856EPSS
Exploits1References3
Rockylinux
Rockylinux
added 2026/05/29 4:3 p.m.22 views

galera and mariadb11.8 security update

An update is available for mariadb11.8, galera. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MariaDB is a community developed fork from MySQL - a multi-user,...

9.9CVSS6AI score0.00856EPSS
Exploits1
Rockylinux
Rockylinux
added 2026/05/28 3:43 p.m.15 views

mariadb:11.8 security update

An update is available for module.galera, module.mariadb, mariadb, galera. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MariaDB is a multi-user, multi-threade...

9.9CVSS6AI score0.00856EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2026/05/28 12:0 a.m.10 views

RockyLinux 9 : mariadb:11.8 (RLSA-2026:19182)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:19182 advisory. MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSONSCHEMAVALID function vulnerability CVE-2026-32710 Tenable has extracted the preceding...

9.9CVSS5.9AI score0.00856EPSS
Exploits1References3
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux – Vulnerability in node-json-schema

JSON-schema is vulnerable to improperly controlled modification of object prototype attributes known as “Prototype Pollution”...

9.8CVSS6.8AI score0.03563EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2026/05/19 6:34 p.m.24 views

Moderate: Red Hat Security Advisory: mariadb:11.8 security update

An update for the mariadb:11.8 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.9CVSS5.9AI score0.00856EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2026/05/19 6:34 p.m.9 views

MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSON_SCHEMA_VALID() function vulnerability

A flaw was found in MariaDB. An authenticated user can exploit a vulnerability in the JSONSCHEMAVALID function, which may lead to a server crash, resulting in a denial of service. Under specific and controlled conditions, this flaw could potentially be leveraged to achieve remote code execution,...

9.9CVSS6.2AI score0.00856EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2026/05/19 1:34 p.m.13 views

Moderate: Red Hat Security Advisory: galera and mariadb11.8 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.9CVSS5.9AI score0.00856EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2026/05/19 1:34 p.m.20 views

MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSON_SCHEMA_VALID() function vulnerability

A flaw was found in MariaDB. An authenticated user can exploit a vulnerability in the JSONSCHEMAVALID function, which may lead to a server crash, resulting in a denial of service. Under specific and controlled conditions, this flaw could potentially be leveraged to achieve remote code execution,...

9.9CVSS6.2AI score0.00856EPSS
Exploits1References6
Rows per page
Query Builder