Skip to main content
cve.nowby Sazabi
← npm
npmPackage

ajv

2 known vulnerabilities (1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 low
Registry
npm

Advisories 2

  • ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is…

    Affected: from 7.0.0-alpha.0, fixed in 8.18.0; fixed in 6.14.0.

  • An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2.

    Affected: fixed in 6.12.3.