npm/@apidevtools/json-schema-ref-parser CVE-2024-29651: high 8.1, EPSS 0.80%

json-schema-ref-parser Prototype Pollution issue

Action: Upgrade @apidevtools/json-schema-ref-parser to 11.2.0 or later.

npm i @apidevtools/json-schema-ref-parser@11.2.0

Affected

Fixed versions

Sources

• osv: GHSA-5f97-h2c2-826q
• https://nvd.nist.gov/vuln/detail/CVE-2024-29651
• https://github.com/APIDevTools/json-schema-ref-parser/commit/8cad7f72c15b198f4d0b5b1c8a3a979b2e4baa82
• https://gist.github.com/tariqhawis/5db76b38112bba756615b688c32409ad
• https://github.com/APIDevTools/json-schema-ref-parser

CVE-2024-29651 · published 2024-05-20T18:31:23Z · modified 2024-05-20T21:26:45.884451Z · JSON