Lucene search
+L

22 matches found

Snyk
Snyk
added 2019/11/27 3:24 p.m.8 views

Internal Property Tampering

Overview schema-inspector is a JSON API sanitisation and validation module. Affected versions of this package are vulnerable to Internal Property Tampering. A maliciously crafted JavaScript object can bypass the sanitize and the validate function used within schema-inspector. Remediation Upgrade...

9.8CVSS6.8AI score0.01392EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
added 2019/11/27 3:24 p.m.2 views

app.io (>=0.0.1, <=0.0.4), feathers-validation (>=0.5.0, <=0.5.1) +6 more potentially affected by CVE-2019-10781 via schema-inspector (>=1.4.2, <=1.6.8)

schema-inspector NPM version =1.4.2, =0.0.1, =0.5.0, =3.8.1, =1.0.2, =1.0.0, =0.2.0, =0.5.0 Source cves: CVE-2019-10781 Source advisory: SNYK:JS-SCHEMAINSPECTOR-536970...

9.8CVSS8.6AI score0.01392EPSS
SaveExploits0
Rows per page
Query Builder