CVE-2026-117680

The lud jsv library (versions 0.1.0 to 0.26.2 ) contains an Improper Check for Unusual or Exceptional Conditions (CWE-754) in the pattern and patternProperties keywords. The root cause is that JSV.Helpers.RegexExt.bounded_match?/2 executes regexes with a backtracking budget but omits :report_erro...

EEF-CVE-2026-117680 jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not

Summary Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud jsv allows an unauthenticated remote attacker to bypass schema validation via a string that matches a schema regex only after heavy backtracking...