CVE-2020-17479

Description

jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array.

Affected packages (1)

• npm/jpvfrom 0, < 2.2.2

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-17479
• WEBhttps://blog.sonatype.com/cve-2020-17479
• WEBhttps://github.com/manvel-khnkoyan/jpv/commit/e3eec1215caa8d5c560f5e88d0943422831927d6
• WEBhttps://github.com/manvel-khnkoyan/jpv/issues/10
• WEBhttps://www.npmjs.com/package/jpv