https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T05:21:14.789473+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-45152 cnvd-2019-45152 2026-10-18T05:21:14.792639+00:00 cnvd-2019-45152 https://cve.radiocsirt.org/vuln/euvd-2026-59349 EUVD-2026-59349 2026-10-18T05:21:14.792670+00:00 EUVD-2026-59349 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19507 fkie_cve-2019-19507 2026-10-18T05:21:14.792684+00:00

In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': {'name':'Array'}. This affects validate(). Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.

 https://cve.radiocsirt.org/vuln/ghsa-rh46-3fgc-mvrf GHSA-rh46-3fgc-mvrf — Validation bypass is possible in Json Pattern Validator 2026-10-18T05:21:14.792712+00:00

Affected: npm: jpv

In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': {'name':'Array'}. This affects validate(). Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.

 https://cve.radiocsirt.org/vuln/gsd-2019-19507 gsd-2019-19507 2026-10-18T05:21:14.792736+00:00 gsd-2019-19507