CVE-2021-3918
moderate-risk
Published 2021-11-13
json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Do I need to act?
~
1.3% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
+
Fix available
Upgrade to: f6f6a3b02d667aa4ba2d5d50cc19208c4462abfa, 22f146111f541d9737e832823699ad3528ca7741
9
CVSS 9.8/10
Critical
NETWORK
/ LOW complexity
Affected Products (2)
Json-Schema
Affected Vendors
References (7)
43
/ 100
moderate-risk
Severity
32/34 · Critical
Exploitability
4/34 · Minimal
Exposure
7/34 · Low