critical9.8
CVE-2019-10781
In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspecto…
Impact
In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schema-Inspector Project | Schema-Inspector | before 1.6.9 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Atinux/schema-inspector/commit/345a7b2eed11bb6128421150d65f4f83fdbb737d
- https://snyk.io/vuln/SNYK-JS-SCHEMAINSPECTOR-536970
- https://github.com/Atinux/schema-inspector/commit/345a7b2eed11bb6128421150d65f4f83fdbb737d
- https://snyk.io/vuln/SNYK-JS-SCHEMAINSPECTOR-536970