5441 matches found
graphos-cli (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-57320 via json-schema-editor-visual (2.0.0)
json-schema-editor-visual NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-schema-editor-visual and may be impacted: - graphos-cli =1.0.0, =1.0.1 Source cves: CVE-2025-57320 Source advisory: OSV:GHSA-3C3P-XH4F-PFH7...
graphos-cli (>=1.0.0, <=1.0.1) potentially affected by CVE-2025-57320 via json-schema-editor-visual (2.0.0)
json-schema-editor-visual NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-schema-editor-visual and may be impacted: - graphos-cli =1.0.0, =1.0.1 Source cves: CVE-2025-57320 Source advisory: GHSA-3C3P-XH4F-PFH7...
graphos-cli (>=1.0.0, <=1.0.1), panshi-client (>=0.0.7, <=0.0.8) potentially affected by CVE-2025-57320 via json-schema-editor-visual (>=1.1.1, <=2.0.0)
json-schema-editor-visual NPM version =1.1.1, =1.0.0, =0.0.7, =0.0.8 Source cves: CVE-2025-57320 Source advisory: SNYK:JS-JSONSCHEMAEDITORVISUAL-13110010...
Prototype Pollution
Overview json-schema-editor-visual is a jsonschema editor Affected versions of this package are vulnerable to Prototype Pollution via the setData or deleteData functions. An attacker can manipulate the prototype of objects by supplying a crafted payload, potentially leading to unauthorized...
json-schema-editor-visual vulnerable to prototype pollution
json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...
GHSA-3C3P-XH4F-PFH7 json-schema-editor-visual vulnerable to prototype pollution
json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...
CVE-2025-57320
json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...
CVE-2025-57320
json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...
cherrypick (>=0.1.0, <=0.2.1), espercli (>=0.0.13, <=0.0.14) +2 more potentially affected by CVE-2025-8869 via pip (21.1.0)
pip PYPI version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cherrypick =0.1.0, =0.0.13, =0.0.5, =0.0.8 Source cves: CVE-2025-8869 Source advisory: OSV:GHSA-4XH5-X5GV-QWPH...
agi-med-utils (>=0.1.10, <=0.1.19), c2cciutils (1.1.31) +2 more potentially affected by CVE-2025-8869 via pip (23.3.0)
pip PYPI version 23.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agi-med-utils =0.1.10, =0.0.15, =0.0.16 - resource-schema-guard-rail 0.0.9 Source cves: CVE-2025-8869 Source advisory: OSV:GHSA-4XH5-X5GV-QWPH...
CVE-2025-57320
The json-schema-editor-visual package (versions thru 1.1.1 ) is vulnerable to a Prototype Pollution vulnerability in the setData and deleteData functions. Due to insufficient validation of user-supplied input, an attacker can supply a crafted payload to inject or delete properties on Object.proto...
CVE-2025-57320
json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...
CVE-2025-57320
json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...
PT-2025-39350
Name of the Vulnerable Software and Affected Versions json-schema-editor-visual versions through 1.1.1 Description A Prototype Pollution issue exists in the setData and deleteData functions. Attackers can inject or delete properties on Object.prototype by providing a crafted payload, potentially...
json-schema-editor-vue security vulnerability
json-schema-editor-vue is a json editor by AlbertZhang personal developer. A security vulnerability exists in json-schema-editor-vue 1.1.1 and earlier versions, which stems from prototype contamination in the setData and deleteData functions, which could lead to a denial of service attack...
CVE-2025-57320: Improperly Controlled Modification of Object Prototype Attributes
json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setData and deleteData function of json-schema-editor-visual versions thru 1.1.1 allows attackers to inject or delete properties on Object.prototype via supplying a crafted payload,...
mysql: PS unspecified vulnerability (CPU Apr 2025)
A flaw was found in the MySQL Server product of Oracle MySQL. This vulnerability allows a remote attacker to cause a denial of service DoS...
vulnerabilitydb
This is a public vulnerability database repository for Snyk, a tool that helps find and fix known vulnerabilities in Node.js dependencies. The repository contains a list of folders for vulnerable npm packages, each with a subfolder for a specific date YYYYMMDD containing data files. The data is...
Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2025-32415 DESCRIPTION: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploi...
