← Vulnerability feed

Vulnerability record · CVE-2019-10781 · published 22 January 2020

CVE-2019-10781: Schema-inspector project schema-inspector exposure of resource to wrong sphere vulnerability

SSchema Inspector Project · Schema Inspector

In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.

9.8 CVSS 3.1 Critical EPSS 1.4% · top 28.6% CWE-668 · Exposure of resource to wrong sphere
9.8CVSS 3.1 base score, v2 7.5
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/Atinux/schema-inspector/commit/345a7b2eed11bb6128421150d65f4f83fdbb737d PatchThird Party Advisory
https://snyk.io/vuln/SNYK-JS-SCHEMAINSPECTOR-536970 Third Party Advisory
https://github.com/Atinux/schema-inspector/commit/345a7b2eed11bb6128421150d65f4f83fdbb737d PatchThird Party Advisory
https://snyk.io/vuln/SNYK-JS-SCHEMAINSPECTOR-536970 Third Party Advisory

Track CVE-2019-10781 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2021-21267Schema-inspector project schema-inspector improper input validation vulnerabilitySchema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector). In before version 2.0.0, email address va…EPSS 2.1%

Source: NIST National Vulnerability Database (record CVE-2019-10781), CISA KEV, FIRST EPSS (scores of 2026-10-05). This page is refreshed as NVD updates the record.