NodeJS/ajv/6.5.0


Another JSON Schema Validator

https://www.npmjs.com/package/ajv
MIT

1 Security Vulnerabilities

Prototype Pollution in Ajv

Published date: 2022-02-10T23:30:59Z
CVE: CVE-2020-15366
Links:

An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON schema could be provided that allows execution of other code by prototype pollution. (While untrusted schemas are recommended against, the worst case of an untrusted schema should be a denial of service, not execution of code.)

Affected versions: ["0.0.4", "0.0.5", "0.0.6", "0.0.7", "0.0.8", "0.0.9", "0.0.10", "0.0.11", "0.0.12", "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.1.4", "0.1.5", "0.1.6", "0.1.7", "0.1.8", "0.1.9", "0.1.10", "0.1.11", "0.1.12", "0.1.13", "0.1.14", "0.1.15", "0.1.16", "0.2.0", "0.2.1", "0.2.2", "0.2.3", "0.2.4", "0.2.5", "0.2.6", "0.2.7", "0.2.8", "0.2.9", "0.3.0", "0.3.1", "0.3.2", "0.3.3", "0.3.4", "0.3.5", "0.3.6", "0.3.7", "0.3.8", "0.3.11", "0.3.12", "0.4.0", "0.4.1", "0.4.2", "0.4.3", "0.4.4", "0.4.5", "0.4.6", "0.4.7", "0.4.8", "0.4.9", "0.4.10", "0.4.12", "0.4.14", "0.4.15", "0.5.0", "0.5.2", "0.5.3", "0.5.4", "0.5.5", "0.5.6", "0.5.7", "0.5.8", "0.5.9", "0.5.10", "0.5.11", "0.5.12", "0.6.0", "0.6.1", "0.6.2", "0.6.3", "0.6.4", "0.6.5", "0.6.6", "0.6.7", "0.6.8", "0.6.9", "0.6.10", "0.6.11", "0.6.12", "0.6.13", "0.6.14", "0.6.15", "0.7.0", "0.7.1", "0.7.2", "1.0.0", "1.0.1", "1.1.1", "1.2.0", "1.2.1", "1.3.0", "1.3.1", "1.3.2", "1.4.0", "1.4.1", "1.4.2", "1.4.3", "1.4.4", "1.4.5", "1.4.6", "1.4.7", "1.4.8", "1.4.9", "2.0.0-beta.0", "2.0.0-beta.1", "1.4.10", "2.0.0-beta.2", "2.0.0-beta.3", "2.0.0", "2.0.1", "2.0.2", "2.0.3", "2.0.4", "2.1.0", "2.1.2", "2.1.3", "2.1.4", "2.2.0", "2.2.1", "2.2.2", "2.3.0", "2.4.0", "2.5.0", "3.0.0", "3.0.1", "3.0.2", "3.0.3", "3.0.4", "3.1.0", "3.1.1", "3.2.0", "3.2.1", "3.2.2", "3.2.3", "3.3.0", "3.3.1", "3.4.0", "3.5.0", "3.5.1", "3.5.2", "3.5.3", "3.6.0", "3.6.1", "3.6.2", "3.7.0", "3.7.1", "3.7.2", "3.8.0", "3.8.1", "3.8.2", "3.8.3", "3.8.4", "3.8.5", "3.8.6", "3.8.7", "3.8.8", "3.8.9", "3.8.10", "4.0.0", "4.0.1", "4.0.2", "4.0.3", "4.0.4", "4.0.5", "4.0.6", "4.1.0", "4.1.1", "4.1.2", "4.1.3", "4.1.4", "4.1.5", "4.1.6", "4.1.7", "4.1.8", "4.2.0", "4.3.0", "4.3.1", "4.4.0", "4.4.1", "4.5.0", "4.6.0", "4.6.1", "4.7.0", "4.7.1", "4.7.2", "4.7.3", "4.7.4", "4.7.5", "4.7.6", "4.7.7", "4.8.0", "4.8.1", "4.8.2", "5.0.0-beta.0", "4.9.0", "5.0.0-beta.1", "4.9.1", "4.9.2", "4.9.3", "4.10.0", "4.10.1", "4.10.2", "4.10.3", "5.0.1-beta.0", "4.10.4", "5.0.1-beta.1", "4.11.0", "4.11.1", "4.11.2", "5.0.1-beta.2", "5.0.1-beta.3", "4.11.3", "5.0.2-beta.0", "5.0.3-beta.0", "4.11.4", "4.11.5", "5.0.4-beta.0", "5.0.4-beta.1", "5.0.4-beta.2", "4.11.6", "5.0.4-beta.3", "4.11.7", "5.0.0", "4.11.8", "5.0.1", "5.1.0", "5.1.1", "5.1.2", "5.1.3", "5.1.4", "5.1.5", "5.1.6", "5.2.0", "5.2.1", "5.2.2", "5.2.3", "5.2.4", "5.2.5", "5.3.0", "6.0.0-beta.0", "6.0.0-beta.1", "6.0.0-beta.2", "5.4.0", "5.5.0", "6.0.0-rc.0", "5.5.1", "6.0.0-rc.1", "5.5.2", "6.0.0", "6.0.1", "6.1.0", "6.1.1", "6.2.0", "6.2.1", "6.3.0", "6.4.0", "6.5.0", "6.5.1", "6.5.2", "6.5.3", "6.5.4", "6.5.5", "6.6.0", "6.6.1", "6.6.2", "6.7.0", "6.8.0", "6.8.1", "6.9.0", "6.9.1", "6.9.2", "6.10.0", "6.10.1", "6.10.2", "6.11.0", "6.12.0", "6.12.1", "6.12.2"]
Secure versions: [6.12.3, 6.12.4, 6.12.5, 7.0.0-alpha.0, 7.0.0-alpha.1, 7.0.0-beta.0, 6.12.6, 7.0.0-beta.1, 7.0.0-beta.2, 7.0.0-beta.3, 7.0.0-beta.4, 7.0.0-beta.5, 7.0.0-beta.6, 7.0.0-beta.7, 7.0.0-beta.8, 7.0.0-beta.9, 7.0.0-rc.0, 7.0.0-rc.1, 7.0.0-rc.2, 7.0.0-rc.3, 7.0.0-rc.4, 7.0.0-rc.5, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.1.0, 7.1.1, 7.2.0, 7.2.1, 8.0.0-beta.0, 8.0.0-beta.1, 8.0.0-beta.2, 7.2.2, 7.2.3, 8.0.0-beta.3, 8.0.0-beta.4, 7.2.4, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.6.1, 8.6.2, 8.6.3, 8.7.0, 8.7.1, 8.8.0, 8.8.1, 8.8.2, 8.9.0, 8.10.0, 8.11.0, 8.11.1, 8.11.2, 8.12.0]
Recommendation: Update to version 8.12.0.

350 Other Versions

Version License Security Released
5.5.2 MIT 1 2017-12-16 - 20:35 over 6 years
5.5.1 MIT 1 2017-12-02 - 12:48 over 6 years
5.5.0 MIT 1 2017-11-24 - 20:45 over 6 years
5.4.0 MIT 1 2017-11-20 - 21:23 over 6 years
5.3.0 MIT 1 2017-10-24 - 19:00 over 6 years
5.2.5 MIT 1 2017-10-24 - 10:32 over 6 years
5.2.4 MIT 1 2017-10-22 - 15:16 over 6 years
5.2.3 MIT 1 2017-09-25 - 20:57 over 6 years
5.2.2 MIT 1 2017-07-10 - 22:19 over 6 years
5.2.1 MIT 1 2017-07-06 - 23:29 over 6 years
5.2.0 MIT 1 2017-06-16 - 23:13 almost 7 years
5.1.6 MIT 1 2017-06-15 - 22:37 almost 7 years
5.1.5 MIT 1 2017-05-28 - 19:59 almost 7 years
5.1.4 MIT 1 2017-05-25 - 21:17 almost 7 years
5.1.3 MIT 1 2017-05-20 - 21:35 almost 7 years
5.1.2 MIT 1 2017-05-19 - 19:53 almost 7 years
5.1.1 MIT 1 2017-05-14 - 22:50 almost 7 years
5.1.0 MIT 1 2017-05-14 - 11:17 almost 7 years
5.0.4-beta.3 MIT 1 2017-04-08 - 20:11 almost 7 years
5.0.4-beta.2 MIT 1 2017-03-25 - 16:33 about 7 years
5.0.4-beta.1 MIT 1 2017-03-19 - 19:57 about 7 years
5.0.4-beta.0 MIT 1 2017-03-12 - 18:46 about 7 years
5.0.3-beta.0 MIT 1 2017-03-01 - 08:16 about 7 years
5.0.2-beta.0 MIT 1 2017-02-12 - 19:39 about 7 years
5.0.1 MIT 1 2017-04-28 - 20:22 almost 7 years
5.0.1-beta.3 MIT 1 2017-02-04 - 23:03 about 7 years
5.0.1-beta.2 MIT 1 2017-01-23 - 21:04 about 7 years
5.0.1-beta.1 MIT 1 2017-01-20 - 23:50 about 7 years
5.0.1-beta.0 MIT 1 2016-12-31 - 00:39 about 7 years
5.0.0 MIT 1 2017-04-17 - 14:42 almost 7 years
5.0.0-beta.1 MIT 1 2016-11-30 - 21:21 over 7 years
5.0.0-beta.0 MIT 1 2016-11-08 - 19:29 over 7 years
4.11.8 MIT 1 2017-04-28 - 19:23 almost 7 years
4.11.7 MIT 1 2017-04-17 - 13:30 almost 7 years
4.11.6 MIT 1 2017-04-07 - 22:56 almost 7 years
4.11.5 MIT 1 2017-03-11 - 21:44 about 7 years
4.11.4 MIT 1 2017-03-04 - 18:34 about 7 years
4.11.3 MIT 1 2017-02-12 - 19:18 about 7 years
4.11.2 MIT 1 2017-01-21 - 21:45 about 7 years
4.11.1 MIT 1 2017-01-21 - 00:32 about 7 years
4.11.0 MIT 1 2017-01-21 - 00:17 about 7 years
4.10.4 MIT 1 2017-01-05 - 20:03 about 7 years
4.10.3 MIT 1 2016-12-25 - 00:17 over 7 years
4.10.2 MIT 1 2016-12-24 - 02:33 over 7 years
4.10.1 MIT 1 2016-12-23 - 17:45 over 7 years
4.10.0 MIT 1 2016-12-11 - 12:52 over 7 years
4.9.3 MIT 1 2016-12-10 - 22:33 over 7 years
4.9.2 MIT 1 2016-12-06 - 21:47 over 7 years
4.9.1 MIT 1 2016-12-03 - 21:51 over 7 years
4.9.0 MIT 1 2016-11-14 - 21:01 over 7 years
4.8.2 MIT 1 2016-10-19 - 23:42 over 7 years
4.8.1 MIT 1 2016-10-19 - 08:39 over 7 years
4.8.0 MIT 1 2016-10-16 - 16:42 over 7 years
4.7.7 MIT 1 2016-10-05 - 18:46 over 7 years
4.7.6 MIT 1 2016-10-02 - 17:36 over 7 years
4.7.5 MIT 1 2016-09-28 - 14:21 over 7 years
4.7.4 MIT 1 2016-09-24 - 18:00 over 7 years
4.7.3 MIT 1 2016-09-22 - 16:59 over 7 years
4.7.2 MIT 1 2016-09-19 - 19:35 over 7 years
4.7.1 MIT 1 2016-09-19 - 16:31 over 7 years
4.7.0 MIT 1 2016-09-06 - 21:55 over 7 years
4.6.1 MIT 1 2016-08-30 - 20:00 over 7 years
4.6.0 MIT 1 2016-08-29 - 22:31 over 7 years
4.5.0 MIT 1 2016-08-15 - 21:21 over 7 years
4.4.1 MIT 1 2016-08-14 - 23:35 over 7 years
4.4.0 MIT 1 2016-08-07 - 12:11 over 7 years
4.3.1 MIT 1 2016-08-05 - 19:34 over 7 years
4.3.0 MIT 1 2016-07-28 - 22:48 over 7 years
4.2.0 MIT 1 2016-07-22 - 14:52 over 7 years
4.1.8 MIT 1 2016-07-21 - 23:49 over 7 years
4.1.7 MIT 1 2016-07-10 - 17:52 over 7 years
4.1.6 MIT 1 2016-07-09 - 23:39 over 7 years
4.1.5 MIT 1 2016-06-28 - 20:47 over 7 years
4.1.4 MIT 1 2016-06-26 - 20:33 almost 8 years
4.1.3 MIT 1 2016-06-11 - 11:08 almost 8 years
4.1.2 MIT 1 2016-06-04 - 20:43 almost 8 years
4.1.1 MIT 1 2016-06-01 - 06:18 almost 8 years
4.1.0 MIT 1 2016-05-27 - 20:31 almost 8 years
4.0.6 MIT 1 2016-05-22 - 01:12 almost 8 years
4.0.5 MIT 1 2016-05-03 - 09:00 almost 8 years
4.0.4 MIT 1 2016-04-23 - 18:56 almost 8 years
4.0.3 MIT 1 2016-04-22 - 09:23 almost 8 years
4.0.2 MIT 1 2016-04-20 - 20:22 almost 8 years
4.0.1 MIT 1 2016-04-18 - 20:21 almost 8 years
4.0.0 MIT 1 2016-04-15 - 23:01 almost 8 years
3.8.10 MIT 1 2016-04-11 - 19:49 almost 8 years
3.8.9 MIT 1 2016-04-10 - 10:54 almost 8 years
3.8.8 MIT 1 2016-03-31 - 17:36 almost 8 years
3.8.7 MIT 1 2016-03-25 - 20:35 about 8 years
3.8.6 MIT 1 2016-03-20 - 19:33 about 8 years
3.8.5 MIT 1 2016-03-14 - 21:19 about 8 years
3.8.4 MIT 1 2016-03-09 - 23:23 about 8 years
3.8.3 MIT 1 2016-03-07 - 06:57 about 8 years
3.8.2 MIT 1 2016-03-02 - 15:01 about 8 years
3.8.1 MIT 1 2016-03-01 - 00:27 about 8 years
3.8.0 MIT 1 2016-02-28 - 23:08 about 8 years
3.7.2 MIT 1 2016-02-24 - 09:27 about 8 years
3.7.1 MIT 1 2016-02-21 - 13:29 about 8 years
3.7.0 MIT 1 2016-02-17 - 23:04 about 8 years
3.6.2 MIT 1 2016-02-14 - 20:43 about 8 years