Lucene search
Veracode Vulnerability DatabaseVERACODE:22094HistoryDec 04, 2019 - 3:21 a.m.
Prototype Pollution
2019-12-0403:21:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
45.5%
jpv is vulnerable to prototype pollution. Insufficient validation of JSON input allows the bypass of the validation logics of jpv. The built-in constructor can be overwritten to manipulate the type detection result.
Related
cve
cve
CVE-2019-19507
2019-12-02 17:15:13
cvelist
cvelist
CVE-2019-19507
2019-12-02 16:17:45
githubexploit
githubexploit
osv
osv
Validation bypass is possible in Json Pattern Validator
2019-12-04 21:25:28
github
github
Validation bypass is possible in Json Pattern Validator
2019-12-04 21:25:28
prion
prion
Design/Logic Flaw
2019-12-02 17:15:00
nvd
nvd
CVE-2019-19507
2019-12-02 17:15:13