NodeJS/ajv/6.10.0


Another JSON Schema Validator

https://www.npmjs.com/package/ajv
MIT

1 Security Vulnerabilities

Prototype Pollution in Ajv

Published date: 2022-02-10T23:30:59Z
CVE: CVE-2020-15366
Links:

An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON schema could be provided that allows execution of other code by prototype pollution. (While untrusted schemas are recommended against, the worst case of an untrusted schema should be a denial of service, not execution of code.)

Affected versions: ["0.0.4", "0.0.5", "0.0.6", "0.0.7", "0.0.8", "0.0.9", "0.0.10", "0.0.11", "0.0.12", "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.1.4", "0.1.5", "0.1.6", "0.1.7", "0.1.8", "0.1.9", "0.1.10", "0.1.11", "0.1.12", "0.1.13", "0.1.14", "0.1.15", "0.1.16", "0.2.0", "0.2.1", "0.2.2", "0.2.3", "0.2.4", "0.2.5", "0.2.6", "0.2.7", "0.2.8", "0.2.9", "0.3.0", "0.3.1", "0.3.2", "0.3.3", "0.3.4", "0.3.5", "0.3.6", "0.3.7", "0.3.8", "0.3.11", "0.3.12", "0.4.0", "0.4.1", "0.4.2", "0.4.3", "0.4.4", "0.4.5", "0.4.6", "0.4.7", "0.4.8", "0.4.9", "0.4.10", "0.4.12", "0.4.14", "0.4.15", "0.5.0", "0.5.2", "0.5.3", "0.5.4", "0.5.5", "0.5.6", "0.5.7", "0.5.8", "0.5.9", "0.5.10", "0.5.11", "0.5.12", "0.6.0", "0.6.1", "0.6.2", "0.6.3", "0.6.4", "0.6.5", "0.6.6", "0.6.7", "0.6.8", "0.6.9", "0.6.10", "0.6.11", "0.6.12", "0.6.13", "0.6.14", "0.6.15", "0.7.0", "0.7.1", "0.7.2", "1.0.0", "1.0.1", "1.1.1", "1.2.0", "1.2.1", "1.3.0", "1.3.1", "1.3.2", "1.4.0", "1.4.1", "1.4.2", "1.4.3", "1.4.4", "1.4.5", "1.4.6", "1.4.7", "1.4.8", "1.4.9", "2.0.0-beta.0", "2.0.0-beta.1", "1.4.10", "2.0.0-beta.2", "2.0.0-beta.3", "2.0.0", "2.0.1", "2.0.2", "2.0.3", "2.0.4", "2.1.0", "2.1.2", "2.1.3", "2.1.4", "2.2.0", "2.2.1", "2.2.2", "2.3.0", "2.4.0", "2.5.0", "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.1.0", "3.1.1", "3.2.0", "3.2.1", "3.2.2", "3.2.3", "3.3.0", "3.3.1", "3.4.0", "3.5.0", "3.5.1", "3.5.2", "3.5.3", "3.6.0", "3.6.1", "3.6.2", "3.7.0", "3.7.1", "3.7.2", "3.8.0", "3.8.1", "3.8.2", "3.8.3", "3.8.4", "3.8.5", "3.8.6", "3.8.7", "3.8.8", "3.8.9", "3.8.10", "4.0.0", "4.0.1", "4.0.2", "4.0.3", "4.0.4", "4.0.5", "4.0.6", "4.1.0", "4.1.1", "4.1.2", "4.1.3", "4.1.4", "4.1.5", "4.1.6", "4.1.7", "4.1.8", "4.2.0", "4.3.0", "4.3.1", "4.4.0", "4.4.1", "4.5.0", "4.6.0", "4.6.1", "4.7.0", "4.7.1", "4.7.2", "4.7.3", "4.7.4", "4.7.5", "4.7.6", "4.7.7", "4.8.0", "4.8.1", "4.8.2", "5.0.0-beta.0", "4.9.0", "5.0.0-beta.1", "4.9.1", "4.9.2", "4.9.3", "4.10.0", "4.10.1", "4.10.2", "4.10.3", "5.0.1-beta.0", "4.10.4", "5.0.1-beta.1", "4.11.0", "4.11.1", "4.11.2", "5.0.1-beta.2", "5.0.1-beta.3", "4.11.3", "5.0.2-beta.0", "5.0.3-beta.0", "4.11.4", "4.11.5", "5.0.4-beta.0", "5.0.4-beta.1", "5.0.4-beta.2", "4.11.6", "5.0.4-beta.3", "4.11.7", "5.0.0", "4.11.8", "5.0.1", "5.1.0", "5.1.1", "5.1.2", "5.1.3", "5.1.4", "5.1.5", "5.1.6", "5.2.0", "5.2.1", "5.2.2", "5.2.3", "5.2.4", "5.2.5", "5.3.0", "6.0.0-beta.0", "6.0.0-beta.1", "6.0.0-beta.2", "5.4.0", "5.5.0", "6.0.0-rc.0", "5.5.1", "6.0.0-rc.1", "5.5.2", "6.0.0", "6.0.1", "6.1.0", "6.1.1", "6.2.0", "6.2.1", "6.3.0", "6.4.0", "6.5.0", "6.5.1", "6.5.2", "6.5.3", "6.5.4", "6.5.5", "6.6.0", "6.6.1", "6.6.2", "6.7.0", "6.8.0", "6.8.1", "6.9.0", "6.9.1", "6.9.2", "6.10.0", "6.10.1", "6.10.2", "6.11.0", "6.12.0", "6.12.1", "6.12.2"]
Secure versions: [6.12.3, 6.12.4, 6.12.5, 7.0.0-alpha.0, 7.0.0-alpha.1, 7.0.0-beta.0, 6.12.6, 7.0.0-beta.1, 7.0.0-beta.2, 7.0.0-beta.3, 7.0.0-beta.4, 7.0.0-beta.5, 7.0.0-beta.6, 7.0.0-beta.7, 7.0.0-beta.8, 7.0.0-beta.9, 7.0.0-rc.0, 7.0.0-rc.1, 7.0.0-rc.2, 7.0.0-rc.3, 7.0.0-rc.4, 7.0.0-rc.5, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.1.0, 7.1.1, 7.2.0, 7.2.1, 8.0.0-beta.0, 8.0.0-beta.1, 8.0.0-beta.2, 7.2.2, 7.2.3, 8.0.0-beta.3, 8.0.0-beta.4, 7.2.4, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.6.1, 8.6.2, 8.6.3, 8.7.0, 8.7.1, 8.8.0, 8.8.1, 8.8.2, 8.9.0, 8.10.0, 8.11.0, 8.11.1, 8.11.2, 8.12.0]
Recommendation: Update to version 8.12.0.

350 Other Versions

Version License Security Released
8.12.0 MIT 2023-01-03 - 14:19 about 1 year
8.11.2 MIT 2022-11-13 - 22:16 over 1 year
8.11.1 MIT 2022-11-13 - 22:05 over 1 year
8.11.0 MIT 2022-03-22 - 22:19 about 2 years
8.10.0 MIT 2022-02-04 - 18:22 about 2 years
8.9.0 MIT 2022-01-15 - 13:01 about 2 years
8.8.2 MIT 2021-11-21 - 19:07 over 2 years
8.8.1 MIT 2021-11-16 - 20:20 over 2 years
8.8.0 MIT 2021-11-13 - 18:33 over 2 years
8.7.1 MIT 2021-11-08 - 21:12 over 2 years
8.7.0 MIT 2021-11-08 - 20:15 over 2 years
8.6.3 MIT 2021-09-12 - 18:20 over 2 years
8.6.2 MIT 2021-07-15 - 20:13 over 2 years
8.6.1 MIT 2021-07-04 - 09:53 over 2 years
8.6.0 MIT 2021-06-06 - 14:57 almost 3 years
8.5.0 MIT 2021-05-20 - 13:33 almost 3 years
8.4.0 MIT 2021-05-14 - 20:12 almost 3 years
8.3.0 MIT 2021-05-09 - 11:34 almost 3 years
8.2.0 MIT 2021-04-27 - 15:08 almost 3 years
8.1.0 MIT 2021-04-11 - 16:52 almost 3 years
8.0.5 MIT 2021-04-02 - 15:54 almost 3 years
8.0.4 MIT 2021-04-02 - 12:53 almost 3 years
8.0.3 MIT 2021-04-01 - 07:04 almost 3 years
8.0.2 MIT 2021-03-31 - 08:00 almost 3 years
8.0.1 MIT 2021-03-27 - 22:47 about 3 years
8.0.0 MIT 2021-03-27 - 12:44 about 3 years
8.0.0-beta.4 MIT 2021-03-23 - 07:37 about 3 years
8.0.0-beta.3 MIT 2021-03-21 - 18:44 about 3 years
8.0.0-beta.2 MIT 2021-03-16 - 20:22 about 3 years
8.0.0-beta.1 MIT 2021-03-15 - 07:56 about 3 years
8.0.0-beta.0 MIT 2021-03-13 - 11:08 about 3 years
7.2.4 MIT 2021-03-26 - 08:19 about 3 years
7.2.3 MIT 2021-03-20 - 07:01 about 3 years
7.2.2 MIT 2021-03-20 - 06:43 about 3 years
7.2.1 MIT 2021-03-07 - 19:03 about 3 years
7.2.0 MIT 2021-03-07 - 10:00 about 3 years
7.1.1 MIT 2021-02-17 - 09:09 about 3 years
7.1.0 MIT 2021-02-11 - 08:42 about 3 years
7.0.4 MIT 2021-02-01 - 21:04 about 3 years
7.0.3 MIT 2021-01-02 - 11:09 about 3 years
7.0.2 MIT 2020-12-19 - 18:42 over 3 years
7.0.1 MIT 2020-12-16 - 19:42 over 3 years
7.0.0 MIT 2020-12-15 - 19:12 over 3 years
7.0.0-rc.5 MIT 2020-12-14 - 20:08 over 3 years
7.0.0-rc.4 MIT 2020-12-14 - 19:34 over 3 years
7.0.0-rc.3 MIT 2020-12-14 - 19:11 over 3 years
7.0.0-rc.2 MIT 2020-12-13 - 19:37 over 3 years
7.0.0-rc.1 MIT 2020-12-09 - 20:49 over 3 years
7.0.0-rc.0 MIT 2020-12-06 - 15:39 over 3 years
7.0.0-beta.9 MIT 2020-12-02 - 08:18 over 3 years
7.0.0-beta.8 MIT 2020-11-29 - 19:31 over 3 years
7.0.0-beta.7 MIT 2020-11-22 - 11:37 over 3 years
7.0.0-beta.6 MIT 2020-11-16 - 22:01 over 3 years
7.0.0-beta.5 MIT 2020-11-15 - 16:52 over 3 years
7.0.0-beta.4 MIT 2020-11-10 - 08:25 over 3 years
7.0.0-beta.3 MIT 2020-11-05 - 08:18 over 3 years
7.0.0-beta.2 MIT 2020-10-24 - 18:14 over 3 years
7.0.0-beta.1 MIT 2020-10-10 - 18:14 over 3 years
7.0.0-beta.0 MIT 2020-09-23 - 19:16 over 3 years
7.0.0-alpha.1 MIT 2020-09-16 - 13:40 over 3 years
7.0.0-alpha.0 MIT 2020-09-15 - 14:58 over 3 years
6.12.6 MIT 2020-10-10 - 17:01 over 3 years
6.12.5 MIT 2020-09-13 - 16:23 over 3 years
6.12.4 MIT 2020-08-15 - 09:07 over 3 years
6.12.3 MIT 2020-07-04 - 16:02 over 3 years
6.12.2 MIT 1 2020-04-19 - 23:18 almost 4 years
6.12.1 MIT 1 2020-04-18 - 19:38 almost 4 years
6.12.0 MIT 1 2020-02-22 - 13:51 about 4 years
6.11.0 MIT 1 2020-01-18 - 09:11 about 4 years
6.10.2 MIT 1 2019-07-14 - 14:16 over 4 years
6.10.1 MIT 1 2019-07-06 - 18:15 over 4 years
6.10.0 MIT 1 2019-03-03 - 11:27 about 5 years
6.9.2 MIT 1 2019-02-22 - 20:16 about 5 years
6.9.1 MIT 1 2019-02-10 - 08:42 about 5 years
6.9.0 MIT 1 2019-02-09 - 22:22 about 5 years
6.8.1 MIT 1 2019-02-02 - 20:07 about 5 years
6.8.0 MIT 1 2019-02-02 - 20:04 about 5 years
6.7.0 MIT 1 2019-01-13 - 17:59 about 5 years
6.6.2 MIT 1 2018-12-16 - 21:10 over 5 years
6.6.1 MIT 1 2018-11-29 - 10:59 over 5 years
6.6.0 MIT 1 2018-11-29 - 07:22 over 5 years
6.5.5 MIT 1 2018-11-04 - 21:47 over 5 years
6.5.4 MIT 1 2018-09-23 - 11:04 over 5 years
6.5.3 MIT 1 2018-08-17 - 16:28 over 5 years
6.5.2 MIT 1 2018-06-30 - 18:57 over 5 years
6.5.1 MIT 1 2018-06-10 - 12:07 almost 6 years
6.5.0 MIT 1 2018-05-08 - 20:49 almost 6 years
6.4.0 MIT 1 2018-03-25 - 10:37 about 6 years
6.3.0 MIT 1 2018-03-17 - 19:53 about 6 years
6.2.1 MIT 1 2018-03-03 - 21:22 about 6 years
6.2.0 MIT 1 2018-02-26 - 08:23 about 6 years
6.1.1 MIT 1 2018-01-30 - 19:43 about 6 years
6.1.0 MIT 1 2018-01-26 - 19:08 about 6 years
6.0.1 MIT 1 2018-01-11 - 22:04 about 6 years
6.0.0 MIT 1 2018-01-07 - 15:32 about 6 years
6.0.0-rc.1 MIT 1 2017-12-03 - 17:59 over 6 years
6.0.0-rc.0 MIT 1 2017-11-26 - 10:49 over 6 years
6.0.0-beta.2 MIT 1 2017-11-12 - 10:13 over 6 years
6.0.0-beta.1 MIT 1 2017-11-06 - 10:18 over 6 years
6.0.0-beta.0 MIT 1 2017-11-06 - 07:43 over 6 years