node-json-schema, JSON Schema validation and specifications, was vulnerable to Improperly Controlled Modification of Object Prototype Attributes. (CVE-2021-3918) References: . MGASA-2022-0463 - Updated nodejs-json-schema packages fix security vulnerability Publication date: 13 Dec 2022 URL: https://advisories.mageia.org/MGASA-2022-0463.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-3918 node-json-schema, JSON Schema validation and specifications, was vulnerable to Improperly Controlled Modification of Object Prototype Attributes. (CVE-2021-3918) References: - https://bugs.mageia.org/show_bug.cgi?id=31238 - https://lists.debian.org/debian-lts-announce/2022/12/msg00013.html - https://www.cve.org/CVERecord?id=CVE-2021-3918 SRPMS: - 8/core/nodejs-json-schema-0.2.3-3.1.mga8 . Mageia security bulletin MGASA-2022-0463 addresses a critical vulnerability in nodejs-json-schema, which causes problems related to object prototypes.. nodejs-json-schema, object control, Mageia advisory, security update. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.