All the vulnerabilities related to the version 1.3.0 of the package
Regular expression deinal of service (ReDoS) in is-my-json-valid
It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON fields defined to have email format. A specially crafted JSON file could cause it to consume an excessive amount of CPU time when validated.
Regular Expression Denial of Service in is-my-json-valid
Version of is-my-json-valid
before 1.4.1 or 2.17.2 are vulnerable to regular expression denial of service (ReDoS) via the email validation function.
Update to version 1.4.1, 2.17.2 or later.
Prototype Pollution in node-jsonpointer
This affects the package jsonpointer
before 5.0.0
. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.